Interim rule on CMMC
The Defense Dept. published an interim rule to provide more clarity on how it will implement the Cybersecurity Maturity Model Certification (CMMC) program.
The rule is effective on Nov. 30.
The interim rule describes an “assessment model and framework” to rate contractors on cybersecurity benchmarks.
More information:
Interim Rule Fed Register notice: https://bit.ly/33ULIZV