32 CFR Part 170, Cybersecurity Maturity Model Certification (CMMC) Program
In effectDoD · Regulation · October 15, 2024
Summary
Sets up DoD's Cybersecurity Maturity Model Certification program, with three levels verified by self-assessment, accredited third-party assessment, or government assessment, which contractors handling federal contract information or CUI must meet when a contract requires it.
Replaces
What FedXchange has recorded
No changes recorded. The watch records a new document and any change in its status.
- Issuer
- Department of Defense (DoD), including the Defense Federal Acquisition Regulation Supplement (DFARS) and the Cybersecurity Maturity Model Certification (CMMC)
- Type
- Regulation
- Number
- 32 CFR Part 170
- Issued
- October 15, 2024
- Status
- In effect
Still in force, possibly with amendments.
Took effect December 16, 2024; contract requirements phase in under the DFARS rule effective November 10, 2025.
Get new governance by email
A weekly email on Fridays, an alert on the day the watch finds something new, or both. Free.