Pentagon plans for CMMC in 2022: More assessment documentation guidance, updated rulemakings

The Defense Department’s plans for its revamped cyber certification program will kick into high gear in 2022, with new guidance for assessments under CMMC 2.0 and updates through rulemaking processes to formally cement changes announced by the Pentagon in November.

Following an internal review by Pentagon leadership, DOD’s Cybersecurity Maturity Model Certification program received a substantial update in November. Efforts to change the maturity model, new and revised assessment guides, and updates to current federal acquisition rules enacted...