Pentagon acquisition rules must be changed to implement CMMC, but delays possible due to COVID-19

The Pentagon is moving aggressively under its cybersecurity certification program to create a framework and structure for contractors, vendors, and suppliers to get up to speed on what they will need to do to get certified, according to a top Defense Department official, but the process of changing acquisition rules to make the program effective could be delayed.

Changing a rule under the Defense Federal Acquisition Regulation Supplement requires a public hearing, which could be challenging in the current environment...