0750-AK81 202304 Unified Agenda of Federal Regulatory and Deregulatory Actions 0750 Defense Acquisition Regulations Council DARC 0700 Department of Defense DOD Assessing Contractor Implementation of Cybersecurity Requirements (DFARS Case 2019-D041)

DoD is amending an interim rule to implement the CMMC framework 2.0 in order to protect against the theft of intellectual property and sensitive information from the Defense Industrial Base (DIB) sector. The CMMC framework is a DoD certification process that measures a company’s institutionalization of processes and implementation of cybersecurity practices. This rule provides the Department with assurances that a DIB contractor can adequately protect sensitive unclassified information at a level commensurate with the risk, accounting for information flow down to its subcontractors in a multi-tier supply chain.

]]> Economically Significant Previously Published in The Unified Agenda Proposed Rule Stage Yes No 48 CFR 204 48 CFR 212 48 CFR 217 48 CFR 252 41 U.S.C. 1303 Pub. L. 116-92, sec. 1648 Yes Interim Final Rule 09/29/2020 85 FR 48513 Interim Final Rule Effective 11/30/2020 NPRM 09/00/2023 Yes Businesses Federal No No 0 2021 0 Yes No 0750-AL68 Split from 0790-AL49 Related to Jennifer Johnson D. Office of the Under Secretary of Defense for Acquisition and Sustainment 0750 Defense Acquisition Regulations Council DARC 703 717-8226 jennifer.d.johnson1.civ@mail.mil Defense Pricing, Contracting, & Acquisition Policy, Defense Acquisition Regulations System, Room 3B938, 3060 Pentagon, Washington DC 20301-3060