Lawyers highlight major aspects of CMMC proposed rule for acquisition purposes

Lawyers from two major law firms are flagging key aspects of the Pentagon’s latest proposed rule to implement its Cybersecurity Maturity Model Certification program, with a focus on new requirements and other considerations for contractors.

“The August 15 proposed rule supplements DOD’s December 2023 proposed rule by providing three components: (1) guidance to contracting officers, (2) a standard contract clause to be included in all contracts covered by the CMMC 2.0 program (DFARS 252.204-7021), and (3) a standard solicitation provision...