The last step before the Department of Defense can incorporate the CMMC into contracts is on course, despite concerns the coronavirus pandemic would delay its implementation. The department is now waiting for the OMB to approve a rule change to the Defense Federal Acquisition Regulation Supplement, which would allow the department to write CMMC clauses into requests for proposals. DoD has said industry should expect CMMC requirements to be in a small number of contracts by the end of the year. The full program will be rolled out over five years.
Cybersecurity, Privacy, & AI
Trending Now
What Business Leaders Need to Know About Cybersecurity Certification and Enforcement in 2025–2026 • NRC Efficiency Plan to Reuse DOE, DoD Data Met With Skepticism • Closed Briefing Sets Stage For House Hearing On Anthropic’s Mythos and Cyber Risks • CISA, G7 Partners Release AI Software Bill of Materials Guidance • OMB to Refresh the Federal IT Dashboard
CMMC Rule Change “Undeterred” by Pandemic, with Requirements Coming Soon
Pattama Julanil | Shutterstock
Stay compliant and protected with daily updates on cybersecurity, data privacy, and federal oversight with our Cyber & Privacy newsletter, delivering up-to-the-minute intelligence Monday–Saturday — Subscribe here.