Pentagon official: First CMMC 2.0 rulemaking not expected in 2021

The Defense Department is in the early stages of developing two new rulemakings to change the Pentagon’s acquisition rules for its Cybersecurity Maturity Model Certification program, and does not expect to release the first rule for public comment during 2021 because details are still under discussion, according to CMMC program leader Buddy Dees.

The rulemaking is “not going to be this calendar year,” Dees said Wednesday at a conference hosted by the Coalition for Government Procurement. Dees said he is...