top of page

Commentary: CMMC - Tips for Bidding on Government Contracts


The Defense Department released on Sept. 29 its highly anticipated interim rule, which amends the Defense Federal Acquisition Regulation Supplement by including three new clauses that implement a mandatory DoD Assessment Methodology and adherence to the Cybersecurity Maturity Model Certification (CMMC) program.


The purpose of the new rule is to give teeth to DFARS 252.204-7012 “Safeguarding Covered Defense Information and Cyber Incident Reporting,” which requires that contractors protect certain controlled unclassified information. The interim rule was to take effect Nov. 30 and is likely to be issued as a final rule with some tweaks based on comments submitted and experience with it in practice.


Click Here to read the full article.

12 views0 comments

Recent Posts

See All

Navigating FOCI Risks: Why Organizations Should Care

Source:EXIGER Managing foreign ownership, control, or influence (FOCI) risk is a critical concern for U.S. companies. This risk extends far beyond a national security issue; it encompasses protecting

Back to Basics: Registering in SAM.gov

Source: SmallGovCon SAM.gov, short for System for Award Management, is the entry point for federal contractors to interface with the government. So, it is a basic starting point for every federal cont

bottom of page