Statute
DFARS
158 published works
Government Contracts
The Defense Department’s Cybersecurity Requirements Go Live
By Bob Loblaw
Key point: Beginning November 10, 2025, DoD contracting officers will begin adding Cybersecurity Maturity Model Certification (CMMC) requirements to solicitations, and contracting officers “shall not award a contract, task order,…
GovCon & Trade
Preparing for DoD’s Upcoming DFARS Rule on Beneficial Ownership and FOCI Vetting
By Todd Overman
The Department of Defense (DoD) is preparing to roll out new requirements that will significantly expand how it evaluates and mitigates foreign ownership, control, or influence (FOCI) across its contractor…
Data Privacy Dish
Recapping CMMC Level 3: Considerations for Government Contractors
By Eleanor M. Ross, Cassidy Kim, Olivia Bellini
On Sept. 10, 2025, the Department Defense (DoD) issued a final rule amending the Defense Acquisition Regulation Supplement (DFARS) to implement the Cybersecurity Maturity Model Certification (CMMC) program for government contractors.
Government Contracts & Investigations Blog
Don’t Fall Behind: The CMMC Final Rule to Update the DFARS is Here!
By Townsend Bourne, Sidney Howe*
On September 10, 2025, the final rule to implement the Cybersecurity Maturity Model Certification (“CMMC”) program in the Defense Federal Acquisition Regulation Supplement (“DFARS”) was published with an effective date…
Global Policy Watch
Cybersecurity Maturity Model Certification (CMMC) Program Procurement Final Rule Announced
By Susan B. Cassidy, Ashden Fein, Robert Huffman, Ryan Burnette, Krissy Chapman
This blog post discusses the Department of Defense’s (“DoD”) new cybersecurity rule that imposes certain cybersecurity requirements on relevant DoD contractors and subcontractors. The post will be of interest to…
Byte Back
The Defense Department’s Cybersecurity Requirements Go Live
Key point: Beginning November 10, 2025, DoD contracting officers will begin adding Cybersecurity Maturity Model Certification (CMMC) requirements to solicitations, and contracting officers “shall not award a contract, task order,…
Password Protected
Department of Defense Issues Final Rule on Cybersecurity Standards for Contractors
By Edwin O. Childs, Andrew Konia, Abram J. Pafford, Todd R. Steggerda, Jack White, Jason M. Vespoli, Maura Naehr, John Sullivan, James Dougherty, Sophie Marsh
After years of waiting, the U.S. Department of Defense (DoD) posted to the Federal Register for public inspection on Sept. 9, 2025, a final rule implementing the Cybersecurity Maturity Model Certification 2.0…
Inside Government Contracts
Cybersecurity Maturity Model Certification (CMMC) Program Procurement Final Rule Announced
By Susan B. Cassidy, Ashden Fein, Robert Huffman, Ryan Burnette, Krissy Chapman
This blog post discusses the Department of Defense’s (“DoD”) new cybersecurity rule that imposes certain cybersecurity requirements on relevant DoD contractors and subcontractors. The post will be of interest to…
Government Contracts Navigator
This Is Not a Drill: Department of Defense Issues Long-Awaited Final CMMC DFARS Rule
Michael Joseph Montalbano ● After years of drafts and interim measures, the Department of Defense (“DOD”) has issued the final Defense Federal Acquisition Regulation Supplement (“DFARS”) rule implementing the Cybersecurity Maturity…
GovCon & Trade
DoD Finalizes CMMC Rule: What Defense Contractors Need to Know
By Richard Arnholt, Todd Overman
The Department of Defense (DoD) has issued its long-awaited final rule implementing the Cybersecurity Maturity Model Certification (CMMC) program into the Defense Federal Acquisition Regulation Supplement (DFARS). The rule establishes…