The Cybersecurity Maturity Model Certification (CMMC) Rule is Final!
Security Boulevard, Monday, September 23rd, 2024
Last week, the CMMC Final Rule (known as CFR 32) was released from OIRA, meaning no more changes can be made.
Since CFR 32 is considered a Major Rule, it will next undergo a Congressional review of up to 60 days, after which it becomes law. Any inaction by Congress results in it becoming law. The only way for changes to be made is for both houses of Congress & the President to overturn the Rule.
For defense contractors handling CUI, know that CMMC is here. If you have been waiting, this is your confirmation to get started.