DFARS Case 2019-D041, Defense Federal Acquisition Regulation Supplement: Assessing Contractor Implementation of Cybersecurity Requirements (DFARS Case 2019-D041)
In effectDoD · Regulation · September 10, 2025
Summary
Puts Cybersecurity Maturity Model Certification requirements into DoD contracts: solicitations must state the required level, offerors must have current status in the Supplier Performance Risk System, and requirements phase in over three years from November 10, 2025.
Replaces
What FedXchange has recorded
No changes recorded. The watch records a new document and any change in its status.
- Issuer
- Department of Defense (DoD), including the Defense Federal Acquisition Regulation Supplement (DFARS) and the Cybersecurity Maturity Model Certification (CMMC)
- Type
- Regulation
- Number
- DFARS Case 2019-D041
- Issued
- September 10, 2025
- Status
- In effect
Still in force, possibly with amendments.
Took effect November 10, 2025.
Get new governance by email
A weekly email on Fridays, an alert on the day the watch finds something new, or both. Free.