Skip to content

DFARS 252.204-7025, Notice of Cybersecurity Maturity Model Certification Level Requirements

In effectDoD · Contract clause · November 10, 2025

Summary

Solicitation provision telling offerors which Cybersecurity Maturity Model Certification level the contract requires; offerors must have that status current in the Supplier Performance Risk System before award.

Read it on www.acquisition.gov

What FedXchange has recorded

No changes recorded. The watch records a new document and any change in its status.

Issuer
Department of Defense (DoD), including the Defense Federal Acquisition Regulation Supplement (DFARS) and the Cybersecurity Maturity Model Certification (CMMC)
Type
Contract clause
Number
DFARS 252.204-7025
Issued
November 10, 2025
Status
In effect

Still in force, possibly with amendments.

Created by the final rule published September 10, 2025.

Get new governance by email

A weekly email on Fridays, an alert on the day the watch finds something new, or both. Free.

Send me

We use your address only to send what you choose, and every email has a one-click unsubscribe. Read the privacy notice.