Last week’s Presidential Debate attracted lots of attention to the many hotly contested topics of our time, but it did not manage to divert our attention away from one of the government contracting space’s most hotly contested topics: the CMMC 2.0 program.
The U.S. Department of Defense (DoD) completed its review of the 32 CFR codification rule in a hasty fashion, reviewing thousands of public comments in a mere six months.
With the conclusion of DoD’s review, the buck has passed to the U.S. Office of Information and Regulatory Affairs (OIRA). OIRA will commence its 90-day (maximum, extensions permitted) major regulatory action review before the final rule is published, with a projected effective date approximately 60 days after the date of publication—pending any Congressional Review Act (CRA) implications. The next key movement date will be the addition of the final rule to the Unified Agenda.
Federal contractors on their way to implementing NIST SP 800-171 standards will be prepared for impending CMMC assessments. Those who are not risk not being prepared in time.
