DFARS 252.204-7021, Contractor Compliance With the Cybersecurity Maturity Model Certification Level Requirements
In effectDoD · Contract clause · November 30, 2020
Summary
Contractors must hold and keep the Cybersecurity Maturity Model Certification level the contract requires for each system that processes federal contract information or CUI, and must pass the requirement down to subcontractors.
What FedXchange has recorded
No changes recorded. The watch records a new document and any change in its status.
- Issuer
- Department of Defense (DoD), including the Defense Federal Acquisition Regulation Supplement (DFARS) and the Cybersecurity Maturity Model Certification (CMMC)
- Type
- Contract clause
- Number
- DFARS 252.204-7021
- Issued
- November 30, 2020
- Status
- In effect
Still in force, possibly with amendments.
Created by an interim rule effective November 30, 2020 as "Cybersecurity Maturity Model Certification Requirements"; revised and retitled by the final rule effective November 10, 2025.
Get new governance by email
A weekly email on Fridays, an alert on the day the watch finds something new, or both. Free.