Data / Federal rules / 2024-22905
Cybersecurity Maturity Model Certification (CMMC) Program
The Defense Department published this final rule in the Federal Register on October 15, 2024. It took effect on December 16, 2024.
SpecStream is the live web data engine for teams and agents. It reads every rule and proposed rule in the Federal Register each morning, and this page is that reading. Name your industry once and new rules, comment deadlines and effective dates arrive in your sheet, CRM, Slack or agent as they are published.
What the agency says
With this final rule, DoD establishes the Cybersecurity Maturity Model Certification (CMMC) Program in order to verify contractors have implemented required security measures necessary to safeguard Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). The mechanisms discussed in this rule will allow the Department to confirm a defense contractor or subcontractor has implemented the security requirements for a specified CMMC level and is maintaining that status (meaning level and assessment type) across the contract period of performance. This rule will be updated as needed, using the appropriate rulemaking process, to address evolving cybersecurity standards, requirements, threats, and other relevant changes.
Key facts
- Document number
- 2024-22905
- Type
- Final rule
- Action
- Final rule
- Agency
- Defense Department
- Published
- October 15, 2024
- Takes effect
- December 16, 2024
- Dates
- This rule is effective December 16, 2024. The incorporation by reference of certain material listed in this rule is approved by the Director of the Federal Register as of December 16, 2024.
- Docket
- Docket ID: DoD-2023-OS-0063
- Regulation ID (RIN)
- 0790-AL49
- Code of Federal Regulations
- 32 CFR 170
- Topics
- Government procurement; Incorporation by reference
- Pages
- 146
Other documents from the Defense Department
Everything from the Defense Department · Rules on government procurement · Rules on incorporation by reference · Published in October 2024
Read from the Federal Register API, last updated 2026-10-23. The document on federalregister.gov is the official record; dates and dockets can change through later corrections. Free to reuse with credit to SpecStream under CC BY 4.0.