Cybersecurity Maturity Model Certification (CMMC) Is Here - Are You Ready? (Better Late Than Never)
Security Boulevard, Monday, December 16th, 2024
Well, the day(s) some people said would never come are here: 32 CFR Part 170, the Cybersecurity Maturity Model Certification (CMMC) Program, hit the Federal Register as a Final Rule on October 15 and is effective TODAY (December 16, 2024).
It's really happening. If you store, process, transmit, or generate Federal Contract Information (FCI) and/or Confidential Unclassified Information (CUI), the day is coming soon (as early as 2025, maybe a little later) when you will have to prove that you have the required security program and controls in place to protect that FCI and CUI. But, since you have had these controls in place since 2018 as required by the DFARS regulation, this should be a piece of cake, right.?