April 14th 2022
Earlier this week CMMC director Stacy Bostjanick announced an official timeline for the CMMC rollout. The Pentagon plans to publish the CMMC ‘interim rule’ by May 2023, with initial requirements showing up in DoD contracts 60 days after the rule publication: https://insidecybersecurity.com/share/13400
Depending on the current status, we estimate 6-12 months to prepare for a CMMC Level 2 certification assessment. The bottleneck will be the availability of C3PAOs as everybody will want to get certified at the same time. In other words – it’s time to get ready sooner than later to ensure eligibility for those new contracts.
For more details about the path to CMMC compliance including time estimates see our page CMMC Certification Process & Timeline.
GSA’s New CUI Requirements: What CMMC Contractors Need to Know Published: May 18, 2026 On January 5, 2026, the U.S. General Services Administration (GSA) signed Revision 1 of an internal IT security procedural guide titled Protecting Controlled Unclassified Information (CUI) in Nonfederal Systems and Organizations Process — document number CIO-IT Security-21-112. The guide establishes a
Read MoreNIST SP 800-172 Revision 3 Is Final: What It Means for CMMC Level 2 and Level 3 Published: May 15, 2026 NIST SP 800-172 Revision 3 is the updated set of enhanced security requirements for protecting Controlled Unclassified Information (CUI) associated with critical programs and high-value assets. Published on May 13, 2026, it replaces the
Read More- None of the information you provide in the form below will be used for marketing purposes -