Achieving CMMC (Cybersecurity Maturity Model Certification) compliance is essential for organizations aiming to secure contracts with the Department of Defense (DoD). Navigating the complexities of CMMC can be challenging, making the role of CMMC consultants invaluable. While you can do this process yourself, if you don’t have the time or ... Read More

The DoD’s CMMC Final Rule became effective on December 16, 2024, and requires organizations who handle CUI to achieve CMMC Level 2 Certification, which will require an independent assessment every 3 years by a C3PAO (CMMC Third Party Assessment Organization). The DoD estimates the cost of these assessments will exceed ... Read More

The CMMC Clause and Why it Matters DFARS 252.204-7021, Cybersecurity Maturity Model Certification Requirements (aka DFARS 7021) was published in January 2024. DFARS 7021 is the vehicle the Department of Defense will use to insert CMMC requirements into defense contracts. Once CMMC rulemaking is complete—which is expected in late 2024—the ... Read More

The long-anticipated CMMC Proposed Rule was released in late 2023 with the expectation that CMMC will appear in DoD contracts by late 2024 or early 2025. As expected, CMMC will require organizations handling CUI to comply with the 110 NIST 800-171 controls to achieve Level 2 and be eligible to ... Read More