CINXE.COM

<!DOCTYPE html>    <html lang="en-US">  <head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link rel="pingback" href="https://advocacy.sba.gov/xmlrpc.php"/> <title>DOD Issues Final CMMC Rule – Office of Advocacy</title> <meta name='robots' content='max-image-preview:large' /> <style>img:is([sizes="auto" i], [sizes^="auto," i]) { contain-intrinsic-size: 3000px 1500px }</style>  <meta property="og:locale" content="en_us"/> <meta property="og:site_name" content="Office of Advocacy"/> <meta property="og:url" content="https://advocacy.sba.gov/2024/10/24/dod-final-cmmc-rule/"/> <meta property="og:title" content="DOD Issues Final CMMC Rule"/> <meta property="og:image" content="https://advocacy.sba.gov/wp-content/uploads/2018/11/agency_The_Pentagon_US_Department_of_Defense_building-1024x646.jpg"/> <meta property="article:section" content="Blog"/> <meta property="article:tag" content="News Articles"/> <meta property="og:description" content="On October 15, 2024, the U.S. Department of Defense (DoD) published the final rule for the Cybersecurity Maturity Model Certification Program (CMMC).When the rule was first proposed on December 26, 2023, the Office of Advocacy filed a comment letter "/> <meta property="og:type" content="article"/> <meta name="twitter:card" content="summary"/> <meta name="twitter:url" content="https://advocacy.sba.gov/2024/10/24/dod-final-cmmc-rule/"/> <meta name="twitter:title" content="DOD Issues Final CMMC Rule"/> <meta name="twitter:description" content="On October 15, 2024, the U.S. Department of Defense (DoD) published the final rule for the Cybersecurity Maturity Model Certification Program (CMMC).When the rule was first proposed on December 26, 2023, the Office of Advocacy filed a comment letter "/> <meta name="twitter:image" content="https://advocacy.sba.gov/wp-content/uploads/2018/11/agency_The_Pentagon_US_Department_of_Defense_building-1024x646.jpg"/>  <link rel='dns-prefetch' href='//fonts.googleapis.com' /> <link rel="alternate" type="application/rss+xml" title="Office of Advocacy » Feed" href="https://advocacy.sba.gov/feed/" /> <link rel="alternate" type="application/rss+xml" title="Office of Advocacy » Comments Feed" href="https://advocacy.sba.gov/comments/feed/" /> <script type="text/javascript"> /* <![CDATA[ */ window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/15.0.3\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/advocacy.sba.gov\/wp-includes\/js\/wp-emoji-release.min.js?ver=6.7.1"}}; /*! This file is auto-generated */ !function(i,n){var o,s,e;function c(e){try{var t={supportTests:e,timestamp:(new Date).valueOf()};sessionStorage.setItem(o,JSON.stringify(t))}catch(e){}}function p(e,t,n){e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(t,0,0);var t=new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data),r=(e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(n,0,0),new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data));return t.every(function(e,t){return e===r[t]})}function u(e,t,n){switch(t){case"flag":return n(e,"\ud83c\udff3\ufe0f\u200d\u26a7\ufe0f","\ud83c\udff3\ufe0f\u200b\u26a7\ufe0f")?!1:!n(e,"\ud83c\uddfa\ud83c\uddf3","\ud83c\uddfa\u200b\ud83c\uddf3")&&!n(e,"\ud83c\udff4\udb40\udc67\udb40\udc62\udb40\udc65\udb40\udc6e\udb40\udc67\udb40\udc7f","\ud83c\udff4\u200b\udb40\udc67\u200b\udb40\udc62\u200b\udb40\udc65\u200b\udb40\udc6e\u200b\udb40\udc67\u200b\udb40\udc7f");case"emoji":return!n(e,"\ud83d\udc26\u200d\u2b1b","\ud83d\udc26\u200b\u2b1b")}return!1}function f(e,t,n){var r="undefined"!=typeof WorkerGlobalScope&&self instanceof WorkerGlobalScope?new OffscreenCanvas(300,150):i.createElement("canvas"),a=r.getContext("2d",{willReadFrequently:!0}),o=(a.textBaseline="top",a.font="600 32px Arial",{});return e.forEach(function(e){o[e]=t(a,e,n)}),o}function t(e){var t=i.createElement("script");t.src=e,t.defer=!0,i.head.appendChild(t)}"undefined"!=typeof Promise&&(o="wpEmojiSettingsSupports",s=["flag","emoji"],n.supports={everything:!0,everythingExceptFlag:!0},e=new Promise(function(e){i.addEventListener("DOMContentLoaded",e,{once:!0})}),new Promise(function(t){var n=function(){try{var e=JSON.parse(sessionStorage.getItem(o));if("object"==typeof e&&"number"==typeof e.timestamp&&(new Date).valueOf()<e.timestamp+604800&&"object"==typeof e.supportTests)return e.supportTests}catch(e){}return null}();if(!n){if("undefined"!=typeof Worker&&"undefined"!=typeof OffscreenCanvas&&"undefined"!=typeof URL&&URL.createObjectURL&&"undefined"!=typeof Blob)try{var e="postMessage("+f.toString()+"("+[JSON.stringify(s),u.toString(),p.toString()].join(",")+"));",r=new Blob([e],{type:"text/javascript"}),a=new Worker(URL.createObjectURL(r),{name:"wpTestEmojiSupports"});return void(a.onmessage=function(e){c(n=e.data),a.terminate(),t(n)})}catch(e){}c(n=f(s,u,p))}t(n)}).then(function(e){for(var t in e)n.supports[t]=e[t],n.supports.everything=n.supports.everything&&n.supports[t],"flag"!==t&&(n.supports.everythingExceptFlag=n.supports.everythingExceptFlag&&n.supports[t]);n.supports.everythingExceptFlag=n.supports.everythingExceptFlag&&!n.supports.flag,n.DOMReady=!1,n.readyCallback=function(){n.DOMReady=!0}}).then(function(){return e}).then(function(){var e;n.supports.everything||(n.readyCallback(),(e=n.source||{}).concatemoji?t(e.concatemoji):e.wpemoji&&e.twemoji&&(t(e.twemoji),t(e.wpemoji)))}))}((window,document),window._wpemojiSettings); /* ]]> */ </script> <style id='wp-emoji-styles-inline-css' type='text/css'> img.wp-smiley, img.emoji { display: inline !important; border: none !important; box-shadow: none !important; height: 1em !important; width: 1em !important; margin: 0 0.07em !important; vertical-align: -0.1em !important; background: none !important; padding: 0 !important; } </style> <link rel='stylesheet' id='wp-block-library-css' href='https://advocacy.sba.gov/wp-includes/css/dist/block-library/style.min.css?ver=6.7.1' type='text/css' media='all' /> <style id='classic-theme-styles-inline-css' type='text/css'> /*! This file is auto-generated */ .wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em + 2px) calc(1.333em + 2px);font-size:1.125em}.wp-block-file__button{background:#32373c;color:#fff;text-decoration:none} </style> <style id='global-styles-inline-css' type='text/css'> :root{--wp--preset--aspect-ratio--square: 1;--wp--preset--aspect-ratio--4-3: 4/3;--wp--preset--aspect-ratio--3-4: 3/4;--wp--preset--aspect-ratio--3-2: 3/2;--wp--preset--aspect-ratio--2-3: 2/3;--wp--preset--aspect-ratio--16-9: 16/9;--wp--preset--aspect-ratio--9-16: 9/16;--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--preset--color--luminous-vivid-orange: #ff6900;--wp--preset--color--luminous-vivid-amber: #fcb900;--wp--preset--color--light-green-cyan: #7bdcb5;--wp--preset--color--vivid-green-cyan: #00d084;--wp--preset--color--pale-cyan-blue: #8ed1fc;--wp--preset--color--vivid-cyan-blue: #0693e3;--wp--preset--color--vivid-purple: #9b51e0;--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple: linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan: linear-gradient(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(252,185,0,1) 0%,rgba(255,105,0,1) 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red: linear-gradient(135deg,rgba(255,105,0,1) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,44,130) 60%,rgb(251,105,98) 80%,rgb(254,248,76) 100%);--wp--preset--gradient--blush-light-purple: linear-gradient(135deg,rgb(255,206,236) 0%,rgb(152,150,240) 100%);--wp--preset--gradient--blush-bordeaux: linear-gradient(135deg,rgb(254,205,165) 0%,rgb(254,45,45) 50%,rgb(107,0,62) 100%);--wp--preset--gradient--luminous-dusk: linear-gradient(135deg,rgb(255,203,112) 0%,rgb(199,81,192) 50%,rgb(65,88,208) 100%);--wp--preset--gradient--pale-ocean: linear-gradient(135deg,rgb(255,245,203) 0%,rgb(182,227,212) 50%,rgb(51,167,181) 100%);--wp--preset--gradient--electric-grass: linear-gradient(135deg,rgb(202,248,128) 0%,rgb(113,206,126) 100%);--wp--preset--gradient--midnight: linear-gradient(135deg,rgb(2,3,129) 0%,rgb(40,116,252) 100%);--wp--preset--font-size--small: 13px;--wp--preset--font-size--medium: 20px;--wp--preset--font-size--large: 36px;--wp--preset--font-size--x-large: 42px;--wp--preset--spacing--20: 0.44rem;--wp--preset--spacing--30: 0.67rem;--wp--preset--spacing--40: 1rem;--wp--preset--spacing--50: 1.5rem;--wp--preset--spacing--60: 2.25rem;--wp--preset--spacing--70: 3.38rem;--wp--preset--spacing--80: 5.06rem;--wp--preset--shadow--natural: 6px 6px 9px rgba(0, 0, 0, 0.2);--wp--preset--shadow--deep: 12px 12px 50px rgba(0, 0, 0, 0.4);--wp--preset--shadow--sharp: 6px 6px 0px rgba(0, 0, 0, 0.2);--wp--preset--shadow--outlined: 6px 6px 0px -3px rgba(255, 255, 255, 1), 6px 6px rgba(0, 0, 0, 1);--wp--preset--shadow--crisp: 6px 6px 0px rgba(0, 0, 0, 1);}:where(.is-layout-flex){gap: 0.5em;}:where(.is-layout-grid){gap: 0.5em;}body .is-layout-flex{display: flex;}.is-layout-flex{flex-wrap: wrap;align-items: center;}.is-layout-flex > :is(*, div){margin: 0;}body .is-layout-grid{display: grid;}.is-layout-grid > :is(*, div){margin: 0;}:where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-columns.is-layout-grid){gap: 2em;}:where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-post-template.is-layout-grid){gap: 1.25em;}.has-black-color{color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color{color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-color{color: var(--wp--preset--color--white) !important;}.has-pale-pink-color{color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-color{color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-color{color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-color{color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-color{color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-color{color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-color{color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-color{color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-color{color: var(--wp--preset--color--vivid-purple) !important;}.has-black-background-color{background-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-background-color{background-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-background-color{background-color: var(--wp--preset--color--white) !important;}.has-pale-pink-background-color{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color{background-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-background-color{background-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-background-color{background-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-background-color{background-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-background-color{background-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-background-color{background-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-background-color{background-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-background-color{background-color: var(--wp--preset--color--vivid-purple) !important;}.has-black-border-color{border-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-border-color{border-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-border-color{border-color: var(--wp--preset--color--white) !important;}.has-pale-pink-border-color{border-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-border-color{border-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-border-color{border-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-border-color{border-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-border-color{border-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-border-color{border-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-border-color{border-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-border-color{border-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-border-color{border-color: var(--wp--preset--color--vivid-purple) !important;}.has-vivid-cyan-blue-to-vivid-purple-gradient-background{background: var(--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple) !important;}.has-light-green-cyan-to-vivid-green-cyan-gradient-background{background: var(--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan) !important;}.has-luminous-vivid-amber-to-luminous-vivid-orange-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important;}.has-luminous-vivid-orange-to-vivid-red-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-orange-to-vivid-red) !important;}.has-very-light-gray-to-cyan-bluish-gray-gradient-background{background: var(--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray) !important;}.has-cool-to-warm-spectrum-gradient-background{background: var(--wp--preset--gradient--cool-to-warm-spectrum) !important;}.has-blush-light-purple-gradient-background{background: var(--wp--preset--gradient--blush-light-purple) !important;}.has-blush-bordeaux-gradient-background{background: var(--wp--preset--gradient--blush-bordeaux) !important;}.has-luminous-dusk-gradient-background{background: var(--wp--preset--gradient--luminous-dusk) !important;}.has-pale-ocean-gradient-background{background: var(--wp--preset--gradient--pale-ocean) !important;}.has-electric-grass-gradient-background{background: var(--wp--preset--gradient--electric-grass) !important;}.has-midnight-gradient-background{background: var(--wp--preset--gradient--midnight) !important;}.has-small-font-size{font-size: var(--wp--preset--font-size--small) !important;}.has-medium-font-size{font-size: var(--wp--preset--font-size--medium) !important;}.has-large-font-size{font-size: var(--wp--preset--font-size--large) !important;}.has-x-large-font-size{font-size: var(--wp--preset--font-size--x-large) !important;} :where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-post-template.is-layout-grid){gap: 1.25em;} :where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-columns.is-layout-grid){gap: 2em;} :root :where(.wp-block-pullquote){font-size: 1.5em;line-height: 1.6;} </style> <link rel='stylesheet' id='better-framework-main-fonts-css' href='https://fonts.googleapis.com/css?family=Source+Sans+Pro:400,600,400italic,700%7CMerriweather:400&display=swap' type='text/css' media='all' /> <script type="text/javascript" src="https://advocacy.sba.gov/wp-includes/js/jquery/jquery.min.js?ver=3.7.1" id="jquery-core-js"></script> <script type="text/javascript" src="https://advocacy.sba.gov/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1" id="jquery-migrate-js"></script>   <link rel="https://api.w.org/" href="https://advocacy.sba.gov/wp-json/" /><link rel="alternate" title="JSON" type="application/json" href="https://advocacy.sba.gov/wp-json/wp/v2/posts/23986" /><link rel="EditURI" type="application/rsd+xml" title="RSD" href="https://advocacy.sba.gov/xmlrpc.php?rsd" /> <meta name="generator" content="WordPress 6.7.1" /> <link rel="canonical" href="https://advocacy.sba.gov/2024/10/24/dod-final-cmmc-rule/" /> <link rel='shortlink' href='https://advocacy.sba.gov/?p=23986' /> <link rel="alternate" title="oEmbed (JSON)" type="application/json+oembed" href="https://advocacy.sba.gov/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fadvocacy.sba.gov%2F2024%2F10%2F24%2Fdod-final-cmmc-rule%2F" /> <link rel="alternate" title="oEmbed (XML)" type="text/xml+oembed" href="https://advocacy.sba.gov/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fadvocacy.sba.gov%2F2024%2F10%2F24%2Fdod-final-cmmc-rule%2F&format=xml" /> <link rel="alternate" href="https://advocacy.prod.ussba.io/2024/10/24/dod-final-cmmc-rule/" hreflang="x-default" /><script type="text/javascript"> (function(url){ if(/(?:Chrome\/26\.0\.1410\.63 Safari\/537\.31|WordfenceTestMonBot)/.test(navigator.userAgent)){ return; } var addEvent = function(evt, handler) { if (window.addEventListener) { document.addEventListener(evt, handler, false); } else if (window.attachEvent) { document.attachEvent('on' + evt, handler); } }; var removeEvent = function(evt, handler) { if (window.removeEventListener) { document.removeEventListener(evt, handler, false); } else if (window.detachEvent) { document.detachEvent('on' + evt, handler); } }; var evts = 'contextmenu dblclick drag dragend dragenter dragleave dragover dragstart drop keydown keypress keyup mousedown mousemove mouseout mouseover mouseup mousewheel scroll'.split(' '); var logHuman = function() { if (window.wfLogHumanRan) { return; } window.wfLogHumanRan = true; var wfscr = document.createElement('script'); wfscr.type = 'text/javascript'; wfscr.async = true; wfscr.src = url + '&r=' + Math.random(); (document.getElementsByTagName('head')[0]||document.getElementsByTagName('body')[0]).appendChild(wfscr); for (var i = 0; i < evts.length; i++) { removeEvent(evts[i], logHuman); } }; for (var i = 0; i < evts.length; i++) { addEvent(evts[i], logHuman); } })('//advocacy.sba.gov/?wordfence_lh=1&hid=C6D9C964D4315C581EDEEABB8F9AE04D'); </script> <script async src="https://www.googletagmanager.com/gtag/js?id=UA-19362636-27"></script> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'UA-19362636-27'); </script> <link rel="shortcut icon" href="https://advocacy.sba.gov/wp-content/uploads/2024/03/Advo-A-seal.png"> <link rel="apple-touch-icon" href="https://advocacy.sba.gov/wp-content/uploads/2024/03/Advo-A-seal.png"> <link rel="apple-touch-icon" sizes="114x114" href="https://advocacy.sba.gov/wp-content/uploads/2024/03/Advo-A-seal.png"> <link rel="apple-touch-icon" sizes="72x72" href="https://advocacy.sba.gov/wp-content/uploads/2024/03/Advo-A-seal.png"> <link rel="apple-touch-icon" sizes="144x144" href="https://advocacy.sba.gov/wp-content/uploads/2024/03/Advo-A-seal.png"><meta name="generator" content="Elementor 3.27.5; features: e_font_icon_svg, additional_custom_breakpoints, e_element_cache; settings: css_print_method-external, google_font-enabled, font_display-swap"> <style> .e-con.e-parent:nth-of-type(n+4):not(.e-lazyloaded):not(.e-no-lazyload), .e-con.e-parent:nth-of-type(n+4):not(.e-lazyloaded):not(.e-no-lazyload) * { background-image: none !important; } @media screen and (max-height: 1024px) { .e-con.e-parent:nth-of-type(n+3):not(.e-lazyloaded):not(.e-no-lazyload), .e-con.e-parent:nth-of-type(n+3):not(.e-lazyloaded):not(.e-no-lazyload) * { background-image: none !important; } } @media screen and (max-height: 640px) { .e-con.e-parent:nth-of-type(n+2):not(.e-lazyloaded):not(.e-no-lazyload), .e-con.e-parent:nth-of-type(n+2):not(.e-lazyloaded):not(.e-no-lazyload) * { background-image: none !important; } } </style> <meta name="generator" content="Powered by WPBakery Page Builder - drag and drop page builder for WordPress."/> <script type="application/ld+json">{ "@context": "http:\/\/schema.org\/", "@type": "Organization", "@id": "#organization", "logo": { "@type": "ImageObject", "url": "https:\/\/advocacy.sba.gov\/wp-content\/uploads\/2019\/03\/a_right-larger-header-site.png" }, "url": "https:\/\/advocacy.sba.gov\/", "name": "Office of Advocacy", "description": "The independent voice for small businesses and entities." }</script> <script type="application/ld+json">{ "@context": "http:\/\/schema.org\/", "@type": "WebSite", "name": "Office of Advocacy", "alternateName": "The independent voice for small businesses and entities.", "url": "https:\/\/advocacy.sba.gov\/" }</script> <script type="application/ld+json">{ "@context": "http:\/\/schema.org\/", "@type": "BlogPosting", "headline": "DOD Issues Final CMMC Rule", "description": "On October 15, 2024, the U.S. Department of Defense (DoD) published the final rule for the Cybersecurity Maturity Model Certification Program (CMMC).When the rule was first proposed on December 26, 2023, the Office of Advocacy filed a comment letter ", "datePublished": "2024-10-24", "dateModified": "2024-10-25", "author": { "@type": "Person", "@id": "#person-OfficeofAdvocacy", "name": "Office of Advocacy" }, "image": { "@type": "ImageObject", "url": "https:\/\/advocacy.sba.gov\/wp-content\/uploads\/2018\/11\/agency_The_Pentagon_US_Department_of_Defense_building.jpg", "width": 2734, "height": 1726 }, "interactionStatistic": [ { "@type": "InteractionCounter", "interactionType": "http:\/\/schema.org\/CommentAction", "userInteractionCount": "0" } ], "publisher": { "@id": "#organization" }, "mainEntityOfPage": "https:\/\/advocacy.sba.gov\/2024\/10\/24\/dod-final-cmmc-rule\/" }</script> <link rel='stylesheet' id='bf-minifed-css-1' href='https://advocacy.sba.gov/wp-content/bs-booster-cache/ead9a16790c99e26a708f717f6e5d10b.css' type='text/css' media='all' /> <link rel='stylesheet' id='7.8.0-1739054753' href='https://advocacy.sba.gov/wp-content/bs-booster-cache/dc969edc3f08db3932b05086bb6381ef.css' type='text/css' media='all' /> <link rel="icon" href="https://advocacy.sba.gov/wp-content/uploads/2024/03/Advo-A-seal-150x150.png" sizes="32x32" /> <link rel="icon" href="https://advocacy.sba.gov/wp-content/uploads/2024/03/Advo-A-seal.png" sizes="192x192" /> <link rel="apple-touch-icon" href="https://advocacy.sba.gov/wp-content/uploads/2024/03/Advo-A-seal.png" /> <meta name="msapplication-TileImage" content="https://advocacy.sba.gov/wp-content/uploads/2024/03/Advo-A-seal.png" />  <style> .listing-item.listing-mg-type-1 .title.title a.post-url.post-url, .listing-item.listing-mg-type-1 .title.title a.post-url.post-url:hover { background-color: #223369; } .listing-mg-type-1 .post-meta .post-author { background-color: #223369; } .listing-item-blog.sticky, .listing-item-blog.sticky:first-child { background-color: #F1C400; } .listing-item-blog-1.has-post-thumbnail .post-summary { color: #000; } .post-meta .post-author { color: #000; } .post-meta .post-author-name { color: #000; } div.item-content > div.content-container > div.post-meta > span.time > time.post-published.updated { color: #fff !important; background-color: #223369; } div.listing > article > div.item-inner > div.post-meta > span.time > time.post-published.updated { color: #000; } .post-meta.single-post-meta .time { color: #000; } /* breadcrumb color */ .bf-breadcrumb .bf-breadcrumb-item a, .bf-breadcrumb .bf-breadcrumb-item span { color: #000; } div.wp-block-file > a.wp-block-file__button { color: #fff; } /* can't identify */ .archive-title .term-badges span.term-badge a { color: #000 !important; border-color: #000000 !important; } /* Load more posts button */ a.btn-bs-pagination { border: 1px solid #000 } span.loaded.txt { color: #000; } /* More Stories posts pop-up prev next buttons */ a.btn-bs-pagination { border: 1px solid #000; color: #000 !important; } .bs-pagination-label { color: #000; } /* Link underlines for posts and pages */ .entry-content a { text-decoration: underline; } /* Tag description button for all posts */ .entry-terms.post-tags a { border: 1px solid #000000; color: #000000; } /* Prev Next pagination numbers for Categories */ div.pagination.bs-numbered-pagination a { border: 1px solid #000; color: #000; !important; } div.pagination.bs-numbered-pagination a.page-numbers { border: 1px solid #000; color: #000; !important; } div.pagination.bs-numbered-pagination span.page-numbers.dots { border: 1px solid #000; color: #000; !important; } span.page-numbers.dots { color: #000; } /* Browsing Tag display of RSS Feed icon */ i.fa.fa-rss {display: none !important;} /* Author profile icon */ .author-profile .author-links ul li.site a { background-color: #223369; display:none} i.fa.fa-globe { alt="Author Profile globe icon" } /* Main navMenu children arrows */ .site-header.header-style-6 .main-menu.menu>li.menu-item-has-children>a:after { position: absolute; width: 100%; left: 0; margin: 0; text-align: center; bottom: 10px; color: #fff; } } </style>  <noscript><style> .wpb_animate_when_almost_visible { opacity: 1; }</style></noscript> </head> <body class="post-template-default single single-post postid-23986 single-format-standard multiple-domain-advocacy-sba-gov bs-theme bs-publisher bs-publisher-clean-magazine ltr close-rh page-layout-3-col-0 full-width main-menu-sticky-smart active-ajax-search single-prim-cat-2028 single-cat-2028 wpb-js-composer js-comp-ver-6.5.0 vc_responsive bs-ll-a elementor-default elementor-kit-25060" dir="ltr"> <div class="main-wrap content-main-wrap"> <header id="header" class="site-header header-style-6 full-width" itemscope="itemscope" itemtype="https://schema.org/WPHeader"> <div class="content-wrap"> <div class="container"> <div class="header-inner clearfix"> <div id="site-branding" class="site-branding"> <p id="site-title" class="logo h1 img-logo"> <a href="https://advocacy.sba.gov/" itemprop="url" rel="home"> <img id="site-logo" src="https://advocacy.sba.gov/wp-content/uploads/2019/03/a_right-larger-header-site.png" alt="Advocacy" data-bsrjs="https://advocacy.sba.gov/wp-content/uploads/2019/03/a_right-larger-header-site-retina.png" /> <span class="site-title">Advocacy - The independent voice for small businesses and entities.</span> </a> </p> </div> <nav id="menu-main" class="menu main-menu-container show-search-item menu-actions-btn-width-1" role="navigation" itemscope="itemscope" itemtype="https://schema.org/SiteNavigationElement"> <div class="menu-action-buttons width-1"> <div class="search-container close"> <span class="search-handler"><i class="fa fa-search"></i></span> <div class="search-box clearfix"> <form role="search" method="get" class="search-form clearfix" action="https://advocacy.sba.gov"> <input type="search" class="search-field" placeholder="Search..." value="" name="s" title="Search for:" autocomplete="off"> <input type="submit" class="search-submit" value="Search"> </form> </div> </div> </div> <ul id="main-navigation" class="main-menu menu bsm-pure clearfix"> <li id="menu-item-20611" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children better-anim-fade menu-item-20611"><a>Regulation</a> <ul class="sub-menu"> <li id="menu-item-11565" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-item-has-children menu-term-2173 better-anim-fade menu-item-11565"><a href="https://advocacy.sba.gov/category/regulation/regulatory-alerts/">Regulatory Alerts</a> <ul class="sub-menu"> <li id="menu-item-23378" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-term-2083 better-anim-fade menu-item-23378"><a href="https://advocacy.sba.gov/category/regulation/alerts-archive/">Regulatory Alerts Archive</a></li> </ul> </li> <li id="menu-item-7542" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-term-2008 better-anim-fade menu-item-7542"><a href="https://advocacy.sba.gov/category/regulation/letters-to-agencies/">Letters to Agencies</a></li> <li id="menu-item-7543" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-item-has-children menu-term-2011 better-anim-fade menu-item-7543"><a href="https://advocacy.sba.gov/category/regulation/agency-roundtables/">Agency Roundtables</a> <ul class="sub-menu"> <li id="menu-item-24408" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-term-2286 better-anim-fade menu-item-24408"><a href="https://advocacy.sba.gov/category/regulation/agency-roundtables/roundtable-recaps/">Roundtable Recaps</a></li> </ul> </li> <li id="menu-item-11349" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-term-2169 better-anim-fade menu-item-11349"><a href="https://advocacy.sba.gov/category/regulation/international-trade/">International Trade</a></li> </ul> </li> <li id="menu-item-20612" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children better-anim-fade menu-item-20612"><a>Research</a> <ul class="sub-menu"> <li id="menu-item-21007" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children better-anim-fade menu-item-21007"><a href="https://advocacy.sba.gov/research-publications/">Research Publications</a> <ul class="sub-menu"> <li id="menu-item-23600" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-term-2203 better-anim-fade menu-item-23600"><a href="https://advocacy.sba.gov/category/research/research-publications/economic-studies/">Economic Studies</a></li> <li id="menu-item-22137" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-term-2272 better-anim-fade menu-item-22137"><a href="https://advocacy.sba.gov/category/research/research-publications/frequently-asked-questions/">FAQs About Small Business</a></li> <li id="menu-item-23811" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-term-2290 better-anim-fade menu-item-23811"><a href="https://advocacy.sba.gov/category/research/research-publications/research-spotlights/">Research Spotlights</a></li> <li id="menu-item-12935" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-term-2195 better-anim-fade menu-item-12935"><a href="https://advocacy.sba.gov/category/research/research-publications/facts-about-small-businesses/">Small Business Facts</a></li> <li id="menu-item-12936" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-term-2014 better-anim-fade menu-item-12936"><a href="https://advocacy.sba.gov/category/research/research-publications/state-profiles/">State Profiles</a></li> </ul> </li> <li id="menu-item-13337" class="menu-item menu-item-type-post_type menu-item-object-page better-anim-fade menu-item-13337"><a href="https://advocacy.sba.gov/small-business-data-resources/">Small Business Data Resources</a></li> </ul> </li> <li id="menu-item-20613" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children better-anim-fade menu-item-20613"><a>Outreach</a> <ul class="sub-menu"> <li id="menu-item-9194" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children better-anim-fade menu-item-9194"><a href="https://advocacy.sba.gov/regional-advocates/">Regional Advocates</a> <ul class="sub-menu"> <li id="menu-item-22494" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-term-2122 better-anim-fade menu-item-22494"><a href="https://advocacy.sba.gov/category/outreach/regional-outreach/">Regional Outreach</a></li> </ul> </li> <li id="menu-item-10865" class="menu-item menu-item-type-post_type menu-item-object-page better-anim-fade menu-item-10865"><a href="https://advocacy.sba.gov/regulatory-reform/">Regulatory Reform</a></li> </ul> </li> <li id="menu-item-22429" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children better-anim-fade menu-item-22429"><a>Newsroom</a> <ul class="sub-menu"> <li id="menu-item-8193" class="menu-item menu-item-type-taxonomy menu-item-object-category current-post-ancestor current-menu-parent current-post-parent menu-item-has-children menu-term-2028 better-anim-fade menu-item-8193"><a href="https://advocacy.sba.gov/category/newsroom/news-articles/">Blog</a> <ul class="sub-menu"> <li id="menu-item-10439" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-term-2154 better-anim-fade menu-item-10439"><a href="https://advocacy.sba.gov/category/newsroom/news-articles/archived-news/">Archived News</a></li> </ul> </li> <li id="menu-item-24278" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-item-has-children menu-term-2024 better-anim-fade menu-item-24278"><a href="https://advocacy.sba.gov/category/newsroom/congressional/">Congressional Testimony</a> <ul class="sub-menu"> <li id="menu-item-24276" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children better-anim-fade menu-item-24276"><a>Congressional Resources</a> <ul class="sub-menu"> <li id="menu-item-24280" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-term-2233 better-anim-fade menu-item-24280"><a href="https://advocacy.sba.gov/category/resources/annual-reports-on-the-rfa/">Annual Reports on the RFA</a></li> <li id="menu-item-24277" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-term-2234 better-anim-fade menu-item-24277"><a href="https://advocacy.sba.gov/category/newsroom/congressional/congressional-resources/legislative-correspondence/">Legislative Correspondence</a></li> <li id="menu-item-24279" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-term-2298 better-anim-fade menu-item-24279"><a href="https://advocacy.sba.gov/category/newsroom/congressional/congressional-resources/reports-to-congress/">Reports to Congress</a></li> </ul> </li> </ul> </li> <li id="menu-item-22420" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-term-2293 better-anim-fade menu-item-22420"><a href="https://advocacy.sba.gov/category/newsroom/events/">Events</a></li> <li id="menu-item-20609" class="menu-item menu-item-type-post_type menu-item-object-page better-anim-fade menu-item-20609"><a href="https://advocacy.sba.gov/media/">Media</a></li> <li id="menu-item-9234" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-term-2018 better-anim-fade menu-item-9234"><a href="https://advocacy.sba.gov/category/newsroom/press-releases/">Press Releases</a></li> </ul> </li> <li id="menu-item-20614" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children better-anim-fade menu-item-20614"><a>Resources</a> <ul class="sub-menu"> <li id="menu-item-13623" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children better-anim-fade menu-item-13623"><a href="https://advocacy.sba.gov/resources/reference-library/">Reference Library</a> <ul class="sub-menu"> <li id="menu-item-13631" class="menu-item menu-item-type-post_type menu-item-object-page better-anim-fade menu-item-13631"><a href="https://advocacy.sba.gov/resources/reference-library/executive-orders/">Executive Orders</a></li> <li id="menu-item-13677" class="menu-item menu-item-type-post_type menu-item-object-page better-anim-fade menu-item-13677"><a href="https://advocacy.sba.gov/resources/reference-library/memorandums-of-understanding/">Memorandums of Understanding</a></li> <li id="menu-item-13694" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children better-anim-fade menu-item-13694"><a href="https://advocacy.sba.gov/resources/reference-library/sbrefa/">SBREFA</a> <ul class="sub-menu"> <li id="menu-item-13692" class="menu-item menu-item-type-post_type menu-item-object-page better-anim-fade menu-item-13692"><a href="https://advocacy.sba.gov/resources/reference-library/sbrefa/sbrefa-legislative-history/">SBREFA Legislative History</a></li> </ul> </li> <li id="menu-item-13630" class="menu-item menu-item-type-post_type menu-item-object-page better-anim-fade menu-item-13630"><a href="https://advocacy.sba.gov/resources/reference-library/small-business-statutes/">Small Business Statutes</a></li> </ul> </li> <li id="menu-item-13624" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children better-anim-fade menu-item-13624"><a href="https://advocacy.sba.gov/resources/the-regulatory-flexibility-act/">Regulatory Flexibility Act</a> <ul class="sub-menu"> <li id="menu-item-13627" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-term-2233 better-anim-fade menu-item-13627"><a href="https://advocacy.sba.gov/category/resources/annual-reports-on-the-rfa/">Annual RFA Report</a></li> <li id="menu-item-13626" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children better-anim-fade menu-item-13626"><a href="https://advocacy.sba.gov/resources/the-regulatory-flexibility-act/rfa-basics/">RFA Basics</a> <ul class="sub-menu"> <li id="menu-item-14651" class="menu-item menu-item-type-post_type menu-item-object-page better-anim-fade menu-item-14651"><a href="https://advocacy.sba.gov/resources/the-regulatory-flexibility-act/rfa-basics/rfa-data-resources-for-federal-agencies/">Data Resources for Federal Agencies</a></li> <li id="menu-item-13625" class="menu-item menu-item-type-post_type menu-item-object-page better-anim-fade menu-item-13625"><a href="https://advocacy.sba.gov/resources/the-regulatory-flexibility-act/rfa-basics/a-guide-for-government-agencies-how-to-comply-with-the-regulatory-flexibility-act/">RFA Compliance Guide for Agencies</a></li> </ul> </li> </ul> </li> <li id="menu-item-14617" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children better-anim-fade menu-item-14617"><a href="https://advocacy.sba.gov/resources/small-business-resources/">Small Business Resources</a> <ul class="sub-menu"> <li id="menu-item-20605" class="menu-item menu-item-type-post_type menu-item-object-page better-anim-fade menu-item-20605"><a href="https://advocacy.sba.gov/resources/small-business-resources/guide-to-federal-rulemaking/">Guide to Federal Rulemaking</a></li> <li id="menu-item-20606" class="menu-item menu-item-type-post_type menu-item-object-page better-anim-fade menu-item-20606"><a href="https://advocacy.sba.gov/resources/small-business-resources/small-business-guide-to-comment-letter-writing/">Small Business Guide to Comment Letter Writing</a></li> </ul> </li> </ul> </li> <li id="menu-item-20615" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children better-anim-fade menu-item-20615"><a>About</a> <ul class="sub-menu"> <li id="menu-item-20594" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children better-anim-fade menu-item-20594"><a href="https://advocacy.sba.gov/home/about/who-we-are/">Who We Are</a> <ul class="sub-menu"> <li id="menu-item-21679" class="menu-item menu-item-type-post_type menu-item-object-page better-anim-fade menu-item-21679"><a href="https://advocacy.sba.gov/home/about/who-we-are/what-we-do/">What We Do</a></li> </ul> </li> <li id="menu-item-22510" class="menu-item menu-item-type-post_type menu-item-object-page hidden-lg hidden-md hidden-sm hidden-xs better-anim-fade menu-item-22510"><a href="https://advocacy.sba.gov/?page_id=22433">Careers</a></li> <li id="menu-item-7528" class="menu-item menu-item-type-post_type menu-item-object-page better-anim-fade menu-item-7528"><a href="https://advocacy.sba.gov/home/about/contact/">Contact Advocacy</a></li> <li id="menu-item-18022" class="menu-item menu-item-type-post_type menu-item-object-page better-anim-fade menu-item-18022"><a href="https://advocacy.sba.gov/home/about/leadership/">Leadership</a></li> <li id="menu-item-24281" class="menu-item menu-item-type-post_type menu-item-object-page better-anim-fade menu-item-24281"><a href="https://advocacy.sba.gov/home/about/advocacy-2016-legislative-priorities/">Legislative Priorities</a></li> <li id="menu-item-8432" class="menu-item menu-item-type-post_type menu-item-object-page better-anim-fade menu-item-8432"><a href="https://advocacy.sba.gov/home/about/performance/">Performance and Budget</a></li> <li id="menu-item-8433" class="menu-item menu-item-type-post_type menu-item-object-page better-anim-fade menu-item-8433"><a href="https://advocacy.sba.gov/home/about/staff/">Staff</a></li> </ul> </li> </ul> </nav> </div> </div> </div> </header> <div class="rh-header clearfix dark deferred-block-exclude"> <div class="rh-container clearfix"> <div class="menu-container close"> <span class="menu-handler"><span class="lines"></span></span> </div> <div class="logo-container rh-img-logo"> <a href="https://advocacy.sba.gov/" itemprop="url" rel="home"> <img src="https://advocacy.sba.gov/wp-content/uploads/2019/03/mobile-icon-logo.png" alt="Office of Advocacy" data-bsrjs="https://advocacy.sba.gov/wp-content/uploads/2019/03/mobile-icon-logo.png" /> </a> </div> </div> </div> <nav role="navigation" aria-label="Breadcrumbs" class="bf-breadcrumb clearfix bc-top-style"><div class="container bf-breadcrumb-container"><ul class="bf-breadcrumb-items" itemscope itemtype="http://schema.org/BreadcrumbList"><meta name="numberOfItems" content="4" /><meta name="itemListOrder" content="Ascending" /><li itemprop="itemListElement" itemscope itemtype="http://schema.org/ListItem" class="bf-breadcrumb-item bf-breadcrumb-begin"><a itemprop="item" href="https://advocacy.sba.gov" rel="home"><span itemprop="name">Home</span></a><meta itemprop="position" content="1" /></li><li itemprop="itemListElement" itemscope itemtype="http://schema.org/ListItem" class="bf-breadcrumb-item"><a itemprop="item" href="https://advocacy.sba.gov/category/newsroom/" ><span itemprop="name">Newsroom</span></a><meta itemprop="position" content="2" /></li><li itemprop="itemListElement" itemscope itemtype="http://schema.org/ListItem" class="bf-breadcrumb-item"><a itemprop="item" href="https://advocacy.sba.gov/category/newsroom/news-articles/" ><span itemprop="name">Blog</span></a><meta itemprop="position" content="3" /></li><li itemprop="itemListElement" itemscope itemtype="http://schema.org/ListItem" class="bf-breadcrumb-item bf-breadcrumb-end"><span itemprop="name">DOD Issues Final CMMC Rule</span><meta itemprop="item" content="https://advocacy.sba.gov/2024/10/24/dod-final-cmmc-rule/"/><meta itemprop="position" content="4" /></li></ul></div></nav><div class="content-wrap"> <main id="content" class="content-container"> <div class="container layout-3-col layout-3-col-0 container layout-bc-before post-template-9"> <div class="row main-section"> <div class="col-sm-12 content-column"> <div class="single-container"> <article id="post-23986" class="post-23986 post type-post status-publish format-standard has-post-thumbnail category-news-articles tag-dod tag-blog-posts single-post-content"> <div class="post-header-inner"> <div class="post-header-title"> <div class="term-badges floated"><span class="term-badge term-2028"><a href="https://advocacy.sba.gov/category/newsroom/news-articles/">Blog</a></span></div> <h1 class="single-post-title"> <span class="post-title" itemprop="headline">DOD Issues Final CMMC Rule</span> </h1> <div class="post-meta single-post-meta"> <a href="https://advocacy.sba.gov/author/officeofadvocacy/" title="Browse Author Articles" class="post-author-a post-author-avatar"> <img alt='' data-src='https://advocacy.sba.gov/wp-content/uploads/2024/03/Advo-A-seal-150x150.png' class='avatar avatar-26 photo avatar-default' height='26' width='26' /><span class="post-author-name">By <b>Office of Advocacy</b></span> </a> <span class="time"><time class="post-published updated" datetime="2024-10-24T16:07:09-04:00">On <b>Oct 24, 2024</b></time></span> </div> </div> </div> <div class="entry-content clearfix single-post-content"> <p>On October 15, 2024, the U.S. Department of Defense (DoD) <a href="https://www.federalregister.gov/documents/2024/10/15/2024-22905/cybersecurity-maturity-model-certification-cmmc-program">published the final rule for the Cybersecurity Maturity Model Certification Program</a> (CMMC).</p> <p>When the rule was first proposed on December 26, 2023, the Office of Advocacy filed a <a href="https://advocacy.sba.gov/2024/02/27/cybersecurity-maturity-model-certification-program/">comment letter outlining small business concerns</a>. DoD’s final rule will impact all DoD contractors and will apply various National Institute of Standards and Technology (NIST) security requirements on all defense contractors.</p> <p><strong>Summary</strong></p> <p>CMMC requirements apply to all DoD solicitations and contracts pursuant to which a defense contractor or subcontractor will process, store, or transmit Federal Contract Information (FCI) or Controlled Unclassified Information (CUI) on unclassified contractor information systems, including those for the acquisition of commercial items. There is a limited exemption for contracts that are solely commercially available off-the-shelf items.</p> <p>Any security requirements by a prime contractor will flow to any subcontractor that interacts with the prime contractor’s FCI or CUI. Prime contractors have the option to enclave certain aspects of their operations to lessen the exposure of FCI and CUI to subcontractors. In addition to various levels of security requirements, CMMC requires a “senior level representative” to submit an affirmation of compliance annually.</p> <p><strong>Levels of Compliance</strong></p> <p>CMMC has three increasing levels of security compliance:</p> <ol class="wp-block-list"> <li>Level 1 contractors are those handling Federal Contract Information (FCI). They will have a list of basic safeguarding requirements that are self-certified annually. All Level 1 requirements are described in the <a href="https://www.acquisition.gov/far/52.204-21">Federal Acquisition Regulation 52.204-21</a>.</li> <li>Level 2 contractors are those that hold Controlled Unclassified Information (CUI). Almost all contractors on this level must be certified for the 110 security requirements described in <a href="https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171r3.pdf">NIST SP 800-171</a> by a CMMC Third Party Assessor Organization (C3PAO) along with the requirements outlined for Level 1 contractors.</li> <li>Level 3 contractors must satisfy all  Level 1 and Level 2 requirements in addition to the 24 security measures described in <a href="https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-172.pdf">NIST SP 800-172</a>.</li> </ol> <p><strong>Steps Towards Implementation</strong></p> <p>Implementation of this rule will not go into effect until the U.S. Code is amended. The rule that would amend the U.S. Code has not been finalized. CMMC will be implemented with a Title 48 Code of Federal Regulations (CFR) rule that will go into the Defense Federal Acquisition Regulation Supplement (DFARS). Comments closed on this proposed rule on Tuesday, October 15, 2024. This will amend DFARS 204.75 and 252.204-7021 (and potentially add DFARS 252.204-7022). Importantly, this proposed rule has not yet been classified as final. While the CMMC rule is final and subject to a 60-day congressional review, it cannot be implemented until the DFAR rule becomes final.</p> <p>Under the Congressional Review Act, Congress can block the rule from taking effect. Rules passed close to the next congressional session are subject to review by the current and the incoming Congress members next calendar year.</p> <p><strong>Potential timeline for the effective date of implementation:</strong></p> <p>CMMC will have a three-tiered certification structure: Level 1, Level 2, and Level 3.</p> <ul class="wp-block-list"> <li>March 1, 2025: Level 1 and Level 2 assessments are required.</li> <li>March 1, 2028: Final stage of implementation. All contracts will have CMMC requirements.</li> </ul> <p>If you have any questions, contact Major Clark at major.clark@sba.gov or David Mullis at david.mullis@sba.gov. </p> </div> <div class="entry-terms post-tags clearfix "> <span class="terms-label"><i class="fa fa-tags"></i></span> <a href="https://advocacy.sba.gov/tag/dod/" rel="tag">DOD</a><a href="https://advocacy.sba.gov/tag/blog-posts/" rel="tag">News Articles</a> </div> </article> </div> </div> </div> </div> </main> </div> <div class="more-stories right more-stories-text-4" data-scroll-top="150" data-close-settings="session;"> <div class="more-stories-title"> More Stories <a href="#" class="more-stories-close"> <i class="fa fa-close"></i> </a> </div> <div class="bs-pagination-wrapper main-term-none next_prev "> <div class="listing listing-text listing-text-4 clearfix columns-1"> <div class="post-24344 type-post format-standard has-post-thumbnail listing-item listing-item-text listing-item-text-4 main-term-2028"> <div class="item-inner"> <div class="term-badges text-badges"><span class="term-badge term-2028"><a href="https://advocacy.sba.gov/category/newsroom/news-articles/">Blog</a></span></div><p class="title"> <a href="https://advocacy.sba.gov/2024/12/19/advocacy-keys-aba-panel-on-the-regulatory-flexibility-act/" class="post-title post-url"> Advocacy Keys ABA Panel on the Regulatory Flexibility Act </a> </p> <div class="post-meta"> <span class="time"><time class="post-published updated" datetime="2024-12-19T09:00:00-05:00">Dec 19, 2024</time></span> </div> </div> </div > <div class="post-24364 type-post format-standard has-post-thumbnail listing-item listing-item-text listing-item-text-4 main-term-2028"> <div class="item-inner"> <div class="term-badges text-badges"><span class="term-badge term-2028"><a href="https://advocacy.sba.gov/category/newsroom/news-articles/">Blog</a></span></div><p class="title"> <a href="https://advocacy.sba.gov/2024/12/17/federal-court-strikes-down-labor-departments-overtime-rule-rejecting-44k-and-59k-salary-thresholds/" class="post-title post-url"> Federal Court Strikes Down Labor Department’s Overtime Rule, Rejecting $44K and $59K Salary Thresholds </a> </p> <div class="post-meta"> <span class="time"><time class="post-published updated" datetime="2024-12-17T09:00:00-05:00">Dec 17, 2024</time></span> </div> </div> </div > <div class="post-24328 type-post format-standard has-post-thumbnail listing-item listing-item-text listing-item-text-4 main-term-2028"> <div class="item-inner"> <div class="term-badges text-badges"><span class="term-badge term-2028"><a href="https://advocacy.sba.gov/category/newsroom/news-articles/">Blog</a></span></div><p class="title"> <a href="https://advocacy.sba.gov/2024/12/12/conversations-and-critters-a-tour-of-fox-creek-veterinary-hospital/" class="post-title post-url"> Conversations and Critters: A Tour of Fox Creek Veterinary Hospital </a> </p> <div class="post-meta"> <span class="time"><time class="post-published updated" datetime="2024-12-12T09:00:00-05:00">Dec 12, 2024</time></span> </div> </div> </div > </div> </div><div class="bs-pagination bs-ajax-pagination next_prev main-term-none clearfix"> <script>var bs_ajax_paginate_175392277 = '{"query":{"count":3,"paginate":"next_prev","pagination-show-label":"1","post_type":"post","posts_per_page":"3","post__not_in":[23986],"ignore_sticky_posts":1,"post_status":["publish","private"],"category__in":[2028],"data":{"listing":"text-4","item-heading-tag":"p","item-sub-heading-tag":"p","item-tag":"div","columns":1},"_layout":{"state":"1|1|0","page":"3-col-0"}},"type":"wp_query","view":"Publisher::listing_ajax_handler","current_page":1,"ajax_url":"\/wp-admin\/admin-ajax.php","data":{"listing":"text-4","item-heading-tag":"p","item-sub-heading-tag":"p","item-tag":"div","columns":1,"vars":{"post-ranking-offset":3}},"remove_duplicates":"0","paginate":"next_prev","pagination-show-label":"1","_layout":{"state":"1|1|0","page":"3-col-0"},"_bs_pagin_token":"5fb46ec"}';</script> <a class="btn-bs-pagination prev disabled" rel="prev" data-id="175392277" title="Previous"> <i class="fa fa-angle-left" aria-hidden="true"></i> Prev </a> <a rel="next" class="btn-bs-pagination next" data-id="175392277" title="Next"> Next <i class="fa fa-angle-right" aria-hidden="true"></i> </a> <span class="bs-pagination-label label-light">1 of 47</span> </div></div> <footer id="site-footer" class="site-footer full-width"> <div class="footer-widgets light-text"> <div class="content-wrap"> <div class="container"> <div class="row"> <div class="col-sm-4"> <aside id="sidebar-footer-1" class="sidebar" role="complementary" aria-label="Footer - Column 1 Sidebar" itemscope="itemscope" itemtype="https://schema.org/WPSideBar"> <div id="block-56" class=" h-ni w-nt footer-widget footer-column-1 widget widget_block widget_media_image"><div class="wp-block-image"> <figure class="alignleft size-full is-resized"><a href="https://www.sba.gov/"><img decoding="async" width="225" height="65" src="https://advocacy.sba.gov/wp-content/uploads/2024/07/SBA-Footer_Logo-Red-White.png" alt="U.S. Small Business Administration" class="wp-image-22697" style="width:201px;height:auto"/></a></figure></div></div> </aside> </div> <div class="col-sm-4"> <aside id="sidebar-footer-2" class="sidebar" role="complementary" aria-label="Footer - Column 2 Sidebar" itemscope="itemscope" itemtype="https://schema.org/WPSideBar"> </aside> </div> <div class="col-sm-4"> <aside id="sidebar-footer-3" class="sidebar" role="complementary" aria-label="Footer - Column 3 Sidebar" itemscope="itemscope" itemtype="https://schema.org/WPSideBar"> <div id="block-53" class=" h-ni w-nt footer-widget footer-column-3 widget widget_block"><p></p> <p style="color:white;" align="right";>Stay Connected<a href="https://www.facebook.com/AdvocacySBA">   <img decoding="async" src="https://advocacy.sba.gov/wp-content/uploads/2024/07/FB-socialmedia-icon.png" alt="Facebook social media icon" style="width:30px;height:30px;"></a>   <a href="https://x.com/AdvocacySBA"><img decoding="async" src="https://advocacy.sba.gov/wp-content/uploads/2024/07/X-socialmedia-icon.png" alt="X social media icon" style="width:30px;height:30px;"></a>   <a href="https://www.linkedin.com/company/u-s-small-business-administration-office-of-advocacy/"><img decoding="async" src="https://advocacy.sba.gov/wp-content/uploads/2024/07/LI-socialmedia-icon.png" alt="Linkedin social media icon" style="width:30px;height:30px;"></a>   <a href="mailto:advocacy@sba.gov"><img decoding="async" src="https://advocacy.sba.gov/wp-content/uploads/2024/07/Email-site-icon-1.png" alt="Linkedin social media icon" style="width:30px;height:30px;"></a> </p> <p></a></p> </div> </aside> </div> </div> </div> </div> </div> <div class="copy-footer"> <div class="content-wrap"> <div class="container"> <div class="row footer-copy-row"> <div class="copy-1 col-lg-6 col-md-6 col-sm-6 col-xs-12"> <p style="color:white;">The Office of Advocacy supports businesses with less than 500 employees, non-profit organizations, and independent contractors. On behalf of small entities in our country, our mission is to help small businesses as regulations are developed.</p> </div> <div class="copy-2 col-lg-6 col-md-6 col-sm-6 col-xs-12"> <p style="color:white;"><a href="https://advocacy.sba.gov/category/regulation/">REGULATION <a href="https://advocacy.sba.gov/category/research/">RESEARCH <a href="https://advocacy.sba.gov/category/news-articles/news/regional-outreach/">OUTREACH <a href="https://advocacy.sba.gov/category/news/">NEWS <a href="https://advocacy.sba.gov/category/resources/">RESOURCES <a href="https://advocacy.sba.gov/who-we-are/">ABOUT</a></p> <p style="color:white;"><a href="https://advocacy.sba.gov/category/regulation/regulatory-alerts/">Regulatory Alerts <a href="https://advocacy.sba.gov/category/regulation/letters-to-agencies/">Letters to Agencies <a href="https://advocacy.sba.gov/category/regulation/agency-roundtables/">Agency Roundtables <a href="https://advocacy.sba.gov/category/research/state-profiles/">State Profiles <a href="https://connect.sba.gov/Home/Accessibility">Accessibility </a></p> </div> </div> </div> </div> </div> </footer> </div> <span class="back-top"><i class="fa fa-arrow-up"></i></span> <script> const lazyloadRunObserver = () => { const lazyloadBackgrounds = document.querySelectorAll( `.e-con.e-parent:not(.e-lazyloaded)` ); const lazyloadBackgroundObserver = new IntersectionObserver( ( entries ) => { entries.forEach( ( entry ) => { if ( entry.isIntersecting ) { let lazyloadBackground = entry.target; if( lazyloadBackground ) { lazyloadBackground.classList.add( 'e-lazyloaded' ); } lazyloadBackgroundObserver.unobserve( entry.target ); } }); }, { rootMargin: '200px 0px 200px 0px' } ); lazyloadBackgrounds.forEach( ( lazyloadBackground ) => { lazyloadBackgroundObserver.observe( lazyloadBackground ); } ); }; const events = [ 'DOMContentLoaded', 'elementor/lazyload/observe', ]; events.forEach( ( event ) => { document.addEventListener( event, lazyloadRunObserver ); } ); </script> <script type="text/javascript" id="publisher-theme-pagination-js-extra"> /* <![CDATA[ */ var bs_pagination_loc = {"loading":"<div class=\"bs-loading\"><div><\/div><div><\/div><div><\/div><div><\/div><div><\/div><div><\/div><div><\/div><div><\/div><div><\/div><\/div>"}; /* ]]> */ </script> <script type="text/javascript" id="publisher-js-extra"> /* <![CDATA[ */ var publisher_theme_global_loc = {"page":{"boxed":"full-width"},"header":{"style":"style-6","boxed":"full-width"},"ajax_url":"https:\/\/advocacy.sba.gov\/wp-admin\/admin-ajax.php","loading":"<div class=\"bs-loading\"><div><\/div><div><\/div><div><\/div><div><\/div><div><\/div><div><\/div><div><\/div><div><\/div><div><\/div><\/div>","translations":{"tabs_all":"All","tabs_more":"More","lightbox_expand":"Expand the image","lightbox_close":"Close"},"lightbox":{"not_classes":""},"main_menu":{"more_menu":"enable"},"top_menu":{"more_menu":"enable"},"skyscraper":{"sticky_gap":30,"sticky":false,"position":""},"share":{"more":true},"refresh_googletagads":"1","get_locale":"en-US","notification":{"subscribe_msg":"By clicking the subscribe button you will never miss the new articles!","subscribed_msg":"You're subscribed to notifications","subscribe_btn":"Subscribe","subscribed_btn":"Unsubscribe"}}; var publisher_theme_ajax_search_loc = {"ajax_url":"https:\/\/advocacy.sba.gov\/wp-admin\/admin-ajax.php","previewMarkup":"<div class=\"ajax-search-results-wrapper ajax-search-no-product\">\n\t<div class=\"ajax-search-results\">\n\t\t<div class=\"ajax-ajax-posts-list\">\n\t\t\t<div class=\"ajax-posts-column\">\n\t\t\t\t<div class=\"clean-title heading-typo\">\n\t\t\t\t\t<span>Posts<\/span>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"posts-lists\" data-section-name=\"posts\"><\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<div class=\"ajax-taxonomy-list\">\n\t\t\t<div class=\"ajax-categories-columns\">\n\t\t\t\t<div class=\"clean-title heading-typo\">\n\t\t\t\t\t<span>Categories<\/span>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"posts-lists\" data-section-name=\"categories\"><\/div>\n\t\t\t<\/div>\n\t\t\t<div class=\"ajax-tags-columns\">\n\t\t\t\t<div class=\"clean-title heading-typo\">\n\t\t\t\t\t<span>Tags<\/span>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"posts-lists\" data-section-name=\"tags\"><\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/div>\n<\/div>\n","full_width":"0"}; /* ]]> */ </script> <div class="rh-cover noscroll no-login-icon no-social-icon" style="background-color: #223369"> <span class="rh-close"></span> <div class="rh-panel rh-pm"> <div class="rh-p-h"> </div> <div class="rh-p-b"> <div class="rh-c-m clearfix"></div> <form role="search" method="get" class="search-form" action="https://advocacy.sba.gov"> <input type="search" class="search-field" placeholder="Search..." value="" name="s" title="Search for:" autocomplete="off"> <input type="submit" class="search-submit" value=""> </form> </div> </div> </div> <script type="text/javascript" async="async" src="https://advocacy.sba.gov/wp-content/bs-booster-cache/51386f6871baa84ac285cd6b77d3dfb0.js?ver=6.7.1" id="bs-booster-js"></script> </body> </html>