Author: Jane Edwards|| Date Published: October 14, 2024
The Department of Defense has issued the final rule for a certification program that seeks to verify whether defense contractors comply with existing cybersecurity protections for federal contract information and controlled unclassified information.
According to the Pentagon, the follow-on rule change to the Defense Federal Acquisition Regulation Supplement to implement the CMMC program will be published in early to mid-2025.
Once the rule takes effect, DOD will incorporate CMMC requirements into solicitations and contracts.
Under CMMC 2.0, the number of assessment levels has been reduced from five to three to streamline the compliance process for small and medium-sized businesses.
Self-assessments will be required for the basic protection of FCI and the general protection of CUI. For some CIU, third-party assessments at CMMC Level 2 and Level 3 will be required for contractors.
DOD has introduced plans of action and milestones, which will be issued for specific requirements to allow a vendor to secure conditional certification for 180 days while working to meet the National Institute of Standards and Technology standards.
Register now for the Potomac Officers Club’s 2025 Defense R&D Summit on Jan. 23, and hear from leading defense researchers, experts and decision makers about the cutting-edge technologies shaping the future of the U.S. military.
Client Solution Architects has appointed Ellen Barletto as chief growth officer, expanding her leadership responsibilities after nearly two decades with…
Brian Meyer, federal field chief technology officer at Axonius Federal, said cybersecurity asset management could help government agencies make dozens…
“Technology transformation company Red River has acquired Invictus International Consulting to expand its cybersecurity and enterprise modernization capabilities to support…
Synergy ECP, a software engineering, cybersecurity and systems engineering services provider, has acquired NetServices, a company offering secure, mission-focused technology services. The…
