On Oct. 14, 2024, the Department of Defense (DoD) published the final rule that would implement the Cybersecurity Maturity Model Certification 2.0 (CMMC) Program under 32 CFR Part 170 (Final Rule) to the Federal Register. The Final Rule comes less than 10 months after DoD published the proposed rule, which yielded approximately 361 submissions during the public comment period. The Final Rule takes effect Dec. 16, 2024.
Comments on the proposed rule that would implement the associated contract clause were due Oct. 15, 2024. Once that rule is final, the entire CMMC program will take effect.