Pentagon plans to publish CMMC ‘interim rule’ by May 2023

[Editor's note: This article has been updated to clarify how the waiver process will work, based on additional information from the Defense Department.]

CMMC director Stacy Bostjanick says the Pentagon is planning to release the “interim rule” to implement its Cybersecurity Maturity Model Certification program by May 2023, with initial requirements showing up in DOD contracts 60 days after the rule publication.

“The CMMC team is in Groundhog Day because now we have to go through the 32 CFR rulemaking...