The amendment to the Defense Federal Acquisition Regulation Supplement marks the near end of a years-long effort to enforce CMMC 2.0 cybersecurity standards for defense contractors.

The publication of the final rule moves to establish the CMMC 2.0 program in federal law.

The newly proposed rule would incorporate new cyber requirements into all contracts for vendors who want to do business with the U.S. military that involves controlled unclassified…

The submission solidifies the fact that DOD has come to a consensus on a final rule and that CMMC is coming in the not-so-distant future.

The DOD is working with civilian agencies on a new FAR rule that would apply new requirements for vendors that handle controlled unclassified information.

In a new report, GAO found that the DOD only met 78% of the 110 CMMC 2.0 requirements for systems that manage controlled unclassified information.