Pentagon internal review delays plans to release CMMC final rule in September

The Defense Department is not planning to release the final rule cementing the implementation of its Cybersecurity Maturity Model Certification program in September, due to an ongoing internal review expected to conclude toward the end of 2021.

“We anticipate the review to be completed in late 2021, at which point the Department will communicate any anticipated changes to the CMMC program to industry and other stakeholders,” Pentagon spokeswoman Jessica Maxwell told Inside Cybersecurity.

Maxwell said, “The Department will complete its...