
The Pentagon on Tuesday published the interim rule for its new Cybersecurity Maturity Model Certification (CMMC) contracting standards, opening up a 60-day period for comments before it goes into effect on Nov. 30. The interim rule amending the Defense Federal Acquisition Regulation Supplement (DFARS) is the start of the Pentagon’s five-year phased roll-out to include CMMC standards in all contracts by October 2025. CMMC is intended to improve DoD’s supply chain security by assigning vendors a cyber security certification on…