September 13, 2024: CMMC passes regulatory examination

The implementation of CMMC certification is gathering pace. On September 13, 2024, the CMMC Final Rule (32 CFR) passed regulatory review. This is a very important milestone, coming sooner than expected.

This rapid progress reflects DoD's desire to put CMMC into effect as quickly as possible.

Next step: review of CMMC by the U.S. Congress within a maximum of 60 days. CMMC will then become official.

As a reminder, according to the initial planning, CMMC was to be put into effect towards the end of Q1 2025.

Here is the link confirming this information: https: //www.reginfo.gov/public/do/eoDetails?rrid=589561
CMMC certifications could therefore start earlier than expected. 

What does this mean for DoD suppliers?
The CMMC could be official before the end of 2024, since Congress has 60 days to review it. However, it was expected by the end of Q1 2025.

As soon as CMMC is official, its requirements will be included in DoD tenders. From then on, CMMC will be binding. Here's a summary of your CMMC (48 CFR) obligations, according to DoD.

As a reminder:

• There are 3 CMMC levels depending on the type of information you have access to: FCI, CUI, etc. For more information on how to determine your CMMC level, please consult this article.
• CMMC Level 2 compliance takes an average of 12 months.