By: Sheila Armstrong, Corey Bieber, Guillermo Christensen, J.D. Koesters

The Department of Defense (DoD) published the updated Cybersecurity Maturity Model Certification (CMMC) Program to enforce existing cybersecurity standards across the defense industrial base. This program is designed to ensure the protection of Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) from growing cyber threats. CMMC requirements will be phased into contracts starting in 2025, marking a shift in accountability for safeguarding non-public information throughout the Defense Industrial Base (DIB).