Now that the final Cybersecurity Maturity Model Certification (CMMC) Program and Procurement Rules have been issued by the Department of War (DoW) (see our CMMC Toolkit for in-depth analysis of these Rules) and the CMMC Program is set to begin in earnest, there is some uncertainty in industry as to how DoW will determine which level of CMMC should apply to a particular procurement, as well as when and how waivers will apply to CMMC requirements. The Procurement Rule is … Read the rest
