On September 9, the Department of War (DoW) released the final DFARS rule implementing the CMMC Program as described at 32 CFR 170.3 for public inspection in the Federal Register. The final rule will ensure DoW procurements will include CMMC assessment requirements that ensure defense contractors properly safeguard the Department’s Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). The CMMC program will provide a consistent methodology for assessing compliance with DoW’s cybersecurity requirements.
The Federal Register Notice is available for public inspection at the following location: www.federalregister.gov/documents/2025/09/10/2025-17359/defense-federal-acquisition-regulation-supplement-assessing-contractor-implementation-of
An introductory course about the CMMC program is available to both Government and industry at: https://www.dau.edu/courses/cyb-1010
Additional information on the CMMC Program can be found at: https://dodcio.defense.gov/CMMC/
