Pentagon finalizes CMMC program rulemaking to formally launch certification initiative

The Defense Department has released the final rule to formally establish the Cybersecurity Maturity Model Certification program, marking a major step forward in the Pentagon’s work to launch version 2.0 of the initiative nearly three years after an internal review.

“The purpose of CMMC is to verify that defense contractors are compliant with existing protections for federal contract information (FCI) and controlled unclassified information (CUI) and are protecting that information at a level commensurate with the risk from cybersecurity threats,...