Skip to main content

CMMC Hub

DoD's CMMC Program

   Under the Department of Defense's Cybersecurity Maturity Model Certification Program, government contractors will be required to verify that they meet the cybersecurity safequarding requirements that correspond to the CMMC level that is assigned to their government contracts.  DoD has not yet finalized the regulation that will incorporate CMMC requirements into government contracts, but finalization of that regulation is expected to occur by the end of 2025.  Once the regulation is final, DoD expects to phase CMMC requirements into all DoD contracts over a three year period.