CMMC final rule goes into effect, kicking off four-phase timeline for contract requirements

The Pentagon’s four-phase timeline for incorporating cyber certification requirements into contract solicitations kicks off Nov. 10, with a final rulemaking amending defense acquisition rules officially going into effect.

The Cybersecurity Maturity Model Certification program has faced a winding road with initial work starting in 2019 to develop the requirements for each level and stand up an independent accreditation body.

A 2021 internal review of the program under the Biden administration led to changes and work to craft new rules....