The final rule for CMMC 2.0 provides clear guidance on key elements of the certification process, including phased implementation, asset scoping, and certification criteria. Check out the major takeaways here.

On October 11, 2024, the DoD released the final program rule for the Cybersecurity Maturity Model Certification (CMMC) Program for public inspection on federalregister.gov. It is anticipated to be published in the Federal Register, Tuesday, October 15.

CMMC finds its roots in an Executive Order regarding CUI in 2010, it has been a long road to assessments opening up in the first part of 2025.