Pentagon publishes final rule implementing CMMC

The Pentagon has published the final acquisition rule implementing the Cybersecurity Maturity Model Certification program. The rule, released in yesterday’s Federal Register will allow Defense Department procurements to include CMMC assessment requirements. The assessments are intended to ensure defense contractors are following cybersecurity standards for protecting controlled unclassified information. The Pentagon estimates 80,000 defense contractors may be required to obtain a CMMC assessment. Officials plan to phase in the requirements over a three-year period.  See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.