View Rule
View EO 12866 Meetings | Printer-Friendly Version Download RIN Data in XML |
DOD/DARC | RIN: 0750-AK81 | Publication ID: Spring 2022 |
Title: Assessing Contractor Implementation of Cybersecurity Requirements (DFARS Case 2019-D041) | |
Abstract:
This rule is pending codification in title 32 CFR of the Cybersecurity Maturity Model Certification (CMMC) program. DoD is finalizing an interim rule to implement the CMMC framework in order to protect against the theft of intellectual property and sensitive information from the Defense Industrial Base (DIB) sector. The CMMC framework is a DoD certification process that measures a company’s institutionalization of processes and implementation of cybersecurity practices. See RIN 0790-AL49 for information on a rule amending title 32 of the Code of Federal Regulations with regard to CMMC, which will inform the DFARS final rule. This rule provides the Department with assurances that a DIB contractor can adequately protect sensitive unclassified information at a level commensurate with the risk, accounting for information flow down to its subcontractors in a multi-tier supply chain. The part of this rule that addressed the NIST SP 800-171 assessment requirements has been separated into RIN 0750-AL68. |
|
Agency: Department of Defense(DOD) | Priority: Economically Significant |
RIN Status: Previously published in the Unified Agenda | Agenda Stage of Rulemaking: Final Rule Stage |
Major: Yes | Unfunded Mandates: No |
CFR Citation: 48 CFR 204 48 CFR 212 48 CFR 217 48 CFR 252 | |
Legal Authority: 41 U.S.C. 1303 Pub. L. 116-92, sec. 1648 |
Legal Deadline:
None |
||||||||||||
Timetable:
|
Regulatory Flexibility Analysis Required: Yes | Government Levels Affected: Federal |
Small Entities Affected: Businesses | Federalism: No |
Included in the Regulatory Plan: No | |
Initial (Administrative Startup and /or Capital) Cost: $0 | Yearly (Annual Operating) Cost: $0 |
Base Year of the Dollar Estimates: 2021 | RIN Data Printed in the FR: Yes |
Related RINs: Split from 0750-AL68, Related to 0790-AL49 | |
Agency Contact: Jennifer Johnson Defense Acquisition Regulations System Department of Defense Defense Acquisition Regulations Council 3060 Defense Pentagon, Room 3B941, Washington, DC 20301-3060 Phone:571 372-6100 Email: jennifer.d.johnson1.civ@mail.mil |