Drafts of updated CMMC model, assessment guides removed from OIRA website

New documents shedding light on the Pentagon’s upcoming plans for its Cybersecurity Maturity Model Certification program have been removed from OMB’s Office of Information and Regulatory Affairs website.

The documents were part of a now-deleted July 28 information collection request on the OIRA website from DOD to support the CMMC rulemaking process. All eight documents were drafts and are subject to further review at the Pentagon before final publication.

A draft update to the CMMC maturity model that...