Share on LinkedInShare on LinkedIn

ARTICLE · 12 SEPTEMBER 2025

Department Of Defense Cybersecurity Maturity Model Certification 2.0 Primed For Implementation

Duane Morris LLP
Duane Morris LLP
Contributor
Explore more from Duane Morris LLP

The U.S. Department of War1 (the "Department") has reached a major milestone with realizing implementation of its new cybersecurity program.

United StatesGovernment, Public Sector

The U.S. Department of War1 (the "Department") has reached a major milestone with realizing implementation of its new cybersecurity program. On August 25, 2025, the Department's proposed rule on the Cybersecurity Maturity Model Certification (CMMC) program was approved by the Office of Information and Regulatory Affairs (OIRA). It was later announced that the final rule will be published on September 10, 2025, in the Federal Register with an effective date of sixty (60) days following publication. The rule will amend the Defense Federal Acquisition Regulations (DFARS) to implement CMMC requirements into some Department contracts depending on the level sensitivity. The final rule, effective November 10, 2025, will usher in long-expected cybersecurity requirements. While many contractors are already implementing CMMC requirements, all Department contractors should review the rule now to prepare for its implementation.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Disclaimer: This Alert has been prepared and published for informational purposes only and is not offered, nor should be construed, as legal advice. For more information, please see the firm's full disclaimer.

See more popular content from