Defense Dept. work with international partners on CMMC reciprocity to follow initial rulemakings

Two rulemakings to implement the Pentagon’s Cybersecurity Maturity Model Certification program are expected in May 2023, according to CMMC director Stacy Bostjanick, who says they could be followed by an additional rule to establish how reciprocity will work with international partners.

The Defense Department expects to submit a new CMMC rulemaking to change Title 32 of the Code of Federal Regulations for Office of Management and Budget review in July, followed by an update to the original interim final...