The United States Department of Defense has begun implementation of the CMMC program with the publication of 32 CFR 170, which will be published in the Federal Register on Tuesday, October 15. The informal version is available now from the Federal Register website https://public-inspection.federalregister.gov/2024-22905.pdf. Weighing in at over 400 pages, 32 CFR 170 lays out the CMMC program, and there are lots of subtleties to unpack in the final rule. What is currently available is the “public inspection” version; it is the text of the final rule, with some omissions such as the effective date. The official publication, with effective date, is scheduled for Tuesday the 15th (the published version will still have 140,000+ words, but it will be formatted more compactly so it will be fewer PDF pages). The effective date (which will probably be around December 14) means in theory that supplier assessments can start under the auspices of the CMMC program – check back with Logical Operations for more information and assistance on how “official” CMMC is, as the dates and process can be difficult to decipher and frequently change.
Remember – if you are an organization doing business with a DoD entity (such as a military base or a defense contractor) you will eventually need to be CMMC compliant in order to continue doing business with that group. Logical Operations can help with this through training courses aimed at providing knowledge on what CMMC is, as well as certifying internal assessors within your organization to help through the CMMC compliance process.
Recent Comments