Federal Government Information Technology

A CMMC interim rule is here — but don't expect it to change much

FedScoop: The interim version of the Department of Defense‘s new cybersecurity regulation for contractors was published Tuesday morning after much anticipation from industry — and with some criticism for how the department is handling this latest step.

The publication of the interim final rule Cybersecurity Maturity Model Certification (CMMC) Defense Federal Acquisition Regulation Supplement rule change starts a 60-day comment period for the public. But at least two trade groups representing federal contractors expressed disappointment in how the 89-page document was published because it will take immediate effect at the end of the comment period, meaning there’s little chance for more changes.

Read article