
The Defense Department on Thursday published proposed changes to federal acquisition regulations that would phase in three years contractor compliance with certain cybersecurity measures. The proposal would implement the Cybersecurity Maturity Model Certification (CMMC) 2.0, which streamlines contractor requirements to three levels of cybersecurity versus five in the original model. The three-year rollout will give small contractors time to comply and DoD said that in the first year the pending new requirements are expected to apply to just over 1,100…