CMMC program rule goes into effect marking significant milestone to launch official assessments

Major changes to the Pentagon’s Cybersecurity Maturity Model Certification program go into effect today through a long-awaited final rulemaking establishing the program in the Code of Federal Regulations.

The final rulemaking caps a three-year process to implement CMMC 2.0 announced by DOD in November 2021, following an internal review of the program ordered by Deputy Defense Secretary Kathleen Hicks near the start of the Biden administration.

The rulemaking amends Title 32 of the CFR to formally establish the...