Connect with us

Hi, what are you looking for?

Internet Security

DOD Publishes Video Overview of CMMC Program and Logistics: Wiley

DOD Publishes Video Overview of CMMC Program and Logistics: Wiley


WHAT: On February 16, 2024, the U.S. Department of Defense (DOD) posted a 40-minute video overview of DOD’s proposed requirements for the Cybersecurity Maturity Model Certification (CMMC) program. The video is available here, and there is an accompanying notice in the Federal Register with a link to the video. As many contractors get ready to work with and use the CMMC program, any guidance from the government may help them understand compliance challenges.

The video discusses the proposed rule that DOD published on December 26, 2023, which outlines the CMMC program’s security, assessment, and affirmation requirements for contractors that handle federal contract information and controlled unclassified information. Comments on the proposed rule are still due by February 26, 2024. We previously summarized the proposed rule here.

WHAT DOES THIS MEAN FOR INDUSTRY: DOD released the video to “improve understanding of the proposed CMMC requirements and increase impact of the public comment period.” If you have been following the CMMC program over the last few years, you’ll already be familiar with the main points DOD emphasized throughout the video.

  • DOD will use the CMMC program to verify contractor compliance with existing cybersecurity requirements.
  • DOD is implementing the CMMC program through two related rulemakings: (1) a “program rule” will amend Title 32 of the Code of Federal Regulations (this is what DOD proposed on December 26, 2023), and (2) an “acquisition rule” will amend the DFARS, which appears in Title 48 of the Code of Federal Regulations (this remains pending in DFARS Case 2019-D041).
  • DOD intends to publish a proposed version of the acquisition rule “this year.”
  • DOD plans to synchronize the effective dates for the program rule and the acquisition rule so that both become final and effective at the same time.
  • DOD will begin the four-phase implementation period only after both rules are effective.
  • DOD aims to begin this implementation process by FY 2025, the same fiscal year in which DOD originally anticipated that it would complete its phase-in plan for the predecessor CMMC 1.0 program.
  • DOD remains committed to implementing the CMMC program.

Wiley’s cross-disciplinary Government ContractsNational Security, and Privacy, Cyber & Data Governance teams will continue to monitor these developments.



The article was first published here

Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

You May Also Like

iPhone

10:29 a.m. ET, February 22, 2024 AT&T recently applied for a waiver to allow it to stop servicing traditional landlines in California From CNN’s...

Entertainmment

Everyone in Kyle Hausmann-Stokes’ compassionate feature My Dead Friend Zoe has suffered a loss. Merit (Sonequa Martin-Green), a nervous Afghanistan war veteran, is reeling...

Gaming

Video: Bandai Namco Reveals New Gameplay Footage Of Dragon Ball Z: Kakarot DLC 6  Nintendo Life Dragon Ball Z: Kakarot DLC Trailer Previews Goku’s Next...

Computing

Using 3D storage techniques, scientists at the University of Shanghai for Science and Technology developed an optical disk capable of accommodating 1.6 petabits of...