Defense Dept. expected to release proposed acquisition rule necessary for cyber certification program in July

The Defense Department is expected to publish a proposed acquisition rule in July that is needed to implement the Cybersecurity Maturity Model Certification program, according to a DOD official, although it’s unclear whether a planned public hearing will be held on the proposal.

The rule change, titled “Strategic Assessment and Cybersecurity Certification Requirements” under Defense Federal Acquisition Regulation Supplement (DFARS), is required for the Pentagon to award contracts containing CMMC language.

A Defense Department official confirmed to Inside Cybersecurity...