
The Defense Department last Friday published its final rule for the Cybersecurity Maturity Certification (CMMC) program, meaning certain cybersecurity requirements will be included in solicitations and contracts in early to mid-2025. The rule will appear in the Oct. 15 issue of the Federal Register. “CMMC provides the tools to hold accountable entities or individuals that put U.S. information or systems at risk by knowingly misrepresenting their cybersecurity practices or protocols, or knowingly violating obligations to monitor and report cybersecurity incidents…