VSOFIC NEWS: New CMMC Rules for Defense Contractors to Come in November

Katie Arrington, CISO in the office of the undersecretary of defense for acquisition and sustainment, says that contractors should expect to see new Cybersecurity Maturity Model Certification version 1.0 requirements in Requests For Proposals released in November. The Pentagon plans to release about 10 Requests For Information with CMMS rules in June. “We are working on different plans and strategies to help,” Arrington explained, noting that contractors bidding on a program may not need to have their CMMC certifications until the time of contract award.