CMMC Timeline Update by DoD

May 13th 2022

After years of delays, the CMMC rulemaking process and subsequent rollout seems to be on track. In fact, the latest update by CMMC director Stacy Bostjanick this week suggests that it might be progressing faster than initially announced. Instead of July of 2023 the new expectation is that CMMC requirements will take effect in May of next year.

“May 2023 is the critical point. That’s when we think we will be able to start putting the requirement in contracts. … You are probably going to see RFIs, RFPs coming out in the summer of 2023.”

Bostjanick said the Pentagon is encouraging companies to do “an early adoption of CMMC” through getting an assessment completed by an approved certified third party assessment organization before the rulemakings go into effect.”

For the full article see:
https://insidecybersecurity.com/share/13502

Depending on the current status, we estimate 6-12 months to prepare for a CMMC Level 2 certification assessment. The bottleneck will be the availability of C3PAOs as everybody will want to get certified at the same time. In other words – it’s time to get ready sooner than later to ensure eligibility for those new contracts.

Contact us for a 30-minute consultation and let’s make sure you don’t miss out on new contract awards.


You may also like

CMMC vs. NIST SP 800-171: What Is the Difference

If your company handles Controlled Unclassified Information (CUI), you have probably seen CMMC and NIST SP 800-171 mentioned in the same conversation. That is one reason so many contractors assume they mean the same thing. They do not. The short version is simple: NIST SP 800-171 tells you what security requirements to implement. CMMC is

Read More

Government Shutdown and CMMC: What Defense Contractors Need to Know

10/10/2025As the federal government shutdown reaches Day 10 with no resolution in sight, defense contractors are asking a critical question: Does this shutdown impact the November 10, 2025 CMMC implementation deadline? The short answer: No. CMMC requirements remain on track. Here’s what defense contractors need to understand about how the current government shutdown affects – or more

Read More

We’d Love to Talk About Your Cybersecurity Strategy.

- None of the information you provide in the form below will be used for marketing purposes -