CMMC program final rule clears OMB regulatory review process as efforts move forward to official launch

A final rule to implement the Pentagon’s Cybersecurity Maturity Certification program has cleared the interagency regulatory review process, setting up publication in the Federal Register within the 60 days needed during the current legislative term to meet the Congressional Review Act requirements.

The rulemaking makes changes to Title 32 of the Code of Federal Regulations and was published on Dec. 26 as a proposed rule along with eight pieces of supporting documentation. The final version on June 27 entered...