Home - Blank Rome LLP

Register to receive insights and analyses on breaking news and trends across varying industries.
<a class="link-primary mt-4" href="/subscribe">Subscribe</a>

Philadelphia, PA

New York, NY

Wilmington, DE

Cincinnati, OH

Princeton, NJ

Los Angeles, CA

Houston, TX

Tampa, FL

Shanghai

South Florida

Pittsburgh, PA

Washington, D.C.

Chicago, IL

Orange County, CA

Dallas, TX

Boston, MA

On December 26, 2023, the Department of Defense (“DoD”) issued the long-awaited&nbsp;<a href="https://www.federalregister.gov/documents/2023/12/26/2023-27280/cybersecurity-maturity-model-certification-cmmc-program">proposed rule</a>&nbsp;for the Cybersecurity Maturity Model Certification (“CMMC”) program. In our previous&nbsp;<a href="https://governmentcontractsnavigator.com/2023/12/22/the-department-of-defense-releases-proposed-cmmc-rule/#more-3349">post</a>, we discussed how the CMMC program comprises three levels with increasing cybersecurity requirements. Contractors will be required to either conduct a self-assessment or undergo a third-party assessment (the latter referred to as a certification assessment) to demonstrate compliance with their applicable CMMC Level.

core/paragraph

DoD included in the proposed rule an estimated timeline for the rollout of the CMMC program. Specifically, DoD intends to implement the CMMC program in four phases over two and a half years:

Phase 1 begins on the effective date of DoD’s final CMMC rule (i.e., when DFARS 252.204–7021 is officially revised). During Phase 1, CMMC Level 1 or Level 2 self-assessments become a condition for contract award. This means that contractors must self-assess their compliance with the cybersecurity requirements of CMMC Level 1 or 2 (whichever level is applicable to the contract) to be eligible for award. DoD may also include third-party CMMC Level 2 assessment requirements in certain contracts at its discretion.

core/list-item

core/list

To read the full post, please visit our&nbsp;<a href="https://governmentcontractsnavigator.com/2024/01/02/the-department-of-defense-issues-proposed-timeline-for-cmmc-implementation/">Government Contracts Navigator</a>&nbsp;blog.

The Department of Defense Issues Proposed Timeline for CMMC Implementation

Offices

Stay Connected

Slide Menu

Slide Search

The Department of Defense Issues Proposed Timeline for CMMC Implementation

Offices

Stay Connected