
The Pentagon’s new cyber security requirements for contracts will be rolled out in about 10 programs this year before being included in all defense acquisition efforts starting in fiscal year 2026, officials said. Defense Department officials detailed the final version of the new Cybersecurity Maturity Model Certification (CMMC) on Friday and addressed concerns the new requirements could place a burden on smaller companies looking to meet the more stringent security criteria. “We have been working with industry associations, primes, mid-tier…