
The Pentagon’s final rule for its new Cybersecurity Maturity Model Certification (CMMC) contracting standards is expected to go into effect next spring, with the department working with the services now to select the first 10 to 15 programs to include the requirement, an official said Tuesday. Stacy Bostjanick, DoD’s director of CMMC policy, also told attendees during a virtual Defense Acquisition University/George Mason University event the initial group of contracts will require no higher than a “Level 3” on the…