Arrington: Rule change needed for DOD cyber certification program enters ‘end phase,’ release planned by November

The Defense Department expects to have a proposed acquisition rule needed to implement its cyber certification program out for public comment by November, according to Pentagon acquisition CISO Katie Arrington, with the final regulation probably pushed into 2021.

The rule for the Cybersecurity Maturity Model Certification program was submitted for review by the Office of Management and Budget in May. The Defense Department had set an aggressive schedule for issuing the proposed rule for public comment by July and...