Defense Dept. begins process of changing acquisition regulations for cyber certification program

The Pentagon has submitted its new rule to the Office of Management and Budget to change acquisition regulations for defense contractors that want to participate in the upcoming Cybersecurity Maturity Model Certification program.

The rule change, titled “Strategic Assessment and Cybersecurity Certification Requirements” under Defense Federal Acquisition Regulation Supplement (DFARS), is required for the Pentagon to award contracts containing CMMC language. The new acquisition rule is currently under review by OMB’s Office of Information and Regulatory Affairs.

OIRA has determined...