DFARS Case 2019-D041, Defense Federal Acquisition Regulation Supplement: Assessing Contractor Implementation of Cybersecurity Requirements (DFARS Case 2019-D041)
In effectDoD · Regulation · September 29, 2020
Summary
Interim rule that created the NIST Special Publication 800-171 DoD assessment method, requiring contractors to post assessment scores in the Supplier Performance Risk System, and introduced the first Cybersecurity Maturity Model Certification clause.
What FedXchange has recorded
No changes recorded. The watch records a new document and any change in its status.
- Issuer
- Department of Defense (DoD), including the Defense Federal Acquisition Regulation Supplement (DFARS) and the Cybersecurity Maturity Model Certification (CMMC)
- Type
- Regulation
- Number
- DFARS Case 2019-D041
- Issued
- September 29, 2020
- Status
- In effect
Still in force, possibly with amendments.
Took effect November 30, 2020; its certification clause was revised by the final rule published September 10, 2025, while its NIST SP 800-171 DoD assessment clauses remain in the DFARS.
Get new governance by email
A weekly email on Fridays, an alert on the day the watch finds something new, or both. Free.