Big CMMC update out of the Pentagon! When CMMC 2.0 was released in late 2021, they stated this process was going to take 9-24 months. Everyone has been anxiously awaiting to find out if this timeline is still on track, and it sounds like it is! According to CMMC director Stacy Bostjanick, “the Pentagon is planning to release the “interim rule” to implement its Cybersecurity Maturity Model Certification program by May 2023, with initial requirements showing up in DOD contracts 60 days after the rule publication.
In a recent Cyber Event, hosted by the New England Chapter of the National Defense Industrial Association, CMMC director Stacy Bostjanick announced that the Pentagon is planning to release the “interim rule” to implement its Cybersecurity Maturity Model Certification (CMMC) program by May 2023. This is followed by the initial requirements showing up in DoD contracts 60 days after the rule publication. This comes as news considering the last update stated that 2025 was the last estimated date. This event also featured industry speakers talking about various CMMC topics and a presentation from the Department of Defense chief software officer Jason Weiss on the Pentagon’s Software Bill of Materials “vision.”
During the event, Bostjanick said, “The CMMC team is in Groundhog Day because now we have to go through the 32 CFR rulemaking activities and relook at the 48 (CFR) that we did last time to update it for what is going to happen with CMMC 2.0,” she continued “We estimated when we started this journey (in November 2021) that it would take us nine to twenty-four months. The nine months has gone away. [We] hope to have everything ready to submit to OMB to start the rulemaking process by July.”
The full press release can be read here.
This is exciting news for many companies pursuing their CMMC certification! On the contrary, for companies that have yet to start their CMMC journey; the window is closing. To keep up with the speed of the Pentagon, businesses that deal with contract work need to start their CMMC Certification process now. Winsor Consulting has multiple registered practitioners that are ready to assist companies and make the certification process painless. Get ahead of the game and take the leap!