Topic
Cybersecurity Maturity Model Certification
77 published works
Online and On Point
The Pentagon Finalizes Sweeping Cybersecurity Rules for DOD Contractors
On October 11, 2024, the United States Department of Defense (DOD) published a final rule implementing its Cybersecurity Maturity Model Certification (CMMC) program, which is designed to verify that defense…
Government Contracts Legal Forum
CMMC Final Rule Includes M&A Trigger for New Assessment
By Peter J. Eyre, Adelicia R. Cliffe, Michael Samuels, Jacob Harrison, Christian Curran, Sarah Burgart, Allison Skager
As Crowell covered in a recent alert, the Department of Defense (DoD) on October 11, 2024 released a final rule (the “Final Program Rule”) formalizing the requirements, assessment processes, and related governance for…
Government Contracts Law
A Standard on Many Levels: A Look at CMMC 2.0 in Final
By Alex Major, Philip Lee
Over the course of the past few years, gallons of ink have been spilled addressing the seemingly ever-pending US Department of Defense’s (DoD) Cybersecurity Maturity Model Certification (CMMC) Program. After…
Government Contracts & Investigations Blog
Countdown to Compliance: DoD Finalizes the CMMC Program Rule
By Townsend Bourne, Lillia Damalouji, Sidney Howe*
On October 15, 2024, the Department of Defense (“DoD”) published the final version of its Cybersecurity Maturity Model Certification (“CMMC”) rule in Title 32 of the Code of Federal Regulations…
Data Privacy Dish
CMMC Rulemaking Approaches Comment Deadline
By Eleanor M. Ross, Cassidy Kim, Olivia Bellini
On Aug. 15, 2024, the Department of Defense (DoD) published a proposed rule that would implement contract clauses under 48 CFR related to the Cybersecurity Maturity Model Certification (CMMC) Program (Proposed Rule). DoD…
The Trade Practitioner
DoD Advances CMMC: Key Takeaways from the Proposed August 2024 DFARS Rule
On August 15, 2024, the US Department of Defense (DoD) published a proposed rule to amend the Defense Federal Acquisition Regulation Supplement (DFARS) in order to implement the Cybersecurity Maturity…
Government Contracts Law
CMMC and DFARS 252.204-7021—Is the Sequel Better than the Original?
Sequels are rarely better than the films that precede them, and yet, sometimes a story is just too compelling to be limited to just one film. At the tail end…
Government Contracts Legal Forum
Fastest 5 Minutes
CMMC, DOJ, FedRAMP This week’s episode covers DOD’s proposed rule regarding Cybersecurity Maturity Model Certification 2.0, DOJ’s new Corporate Whistleblower Awards Pilot Program, and an OMB memo that proposes updates…
Inside Cybersecurity & Privacy Law
US DoD Proposes Final Rule to Incorporate Contractual Requirements for the Cybersecurity Maturity Model Certification (CMMC)
By Adam Hickey, Luke Levasseur, Evan Williams
On August 15, 2024, the Department of Defense (DoD) published a proposed rule to amend the Defense Federal Acquisition Regulation Supplement (DFARS) to incorporate contractual requirements related to the Cybersecurity Maturity Model…
Government Contracts Legal Forum
DFARS 7021 Clause 2.0: DoD Releases Proposed Rule Updating CMMC Clause
On August 15, 2024, the Department of Defense (“DoD”) released the long-awaited proposed rule (“August 2024 Proposed Rule”), updating Defense Federal Acquisition Regulation Supplement (“DFARS”) Clause 252.204-7021 (the “7021 Clause”), which, when…