DoD Previews New Third-Party Cyber Certification Requirements
Client Alert | 1 min read | 06.17.19
The Department of Defense is moving closer to a third-party certification to ensure compliance with its standard cybersecurity requirements – what is being called the “Cybersecurity Maturity Model Certification” (CMMC). While still in the early stages of development, the CMMC would likely require all contractors subject to DFARS 252.204-7012 to obtain a certification issued by an independent third party stating that the contractor has sufficiently implemented its required cybersecurity controls. Holding this certification would be a “go/no-go” condition to compete for relevant DoD work. Although NIST SP 800-171 is the default cybersecurity standard currently required under -7012, DoD is also exploring the creation of a new standard that would govern the certification. DoD is projecting that the CMMC will start appearing in solicitations as early as Fall 2020, but much work remains to be done – including potential revisions to -7012 – and will no doubt be informed by extensive industry engagement.
Contacts

Partner and Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 1 min read | 08.10.26
In Appeal of Bahadir (a C&M case), the Armed Services Board of Contract Appeals denied the government’s motion to dismiss in its entirety, ruling in favor of the contractor on both key issues raised by the government. The case arises from a contract for construction work at Al Udeid Air Base in Qatar, under which Appellant alleged government-caused delay and filed certified prolongation claims using a “windows analysis” methodology. The government moved to dismiss, arguing that Appellant failed to state a sum certain for each of what the government characterized as 38 distinct claims, and separately that four claims had not been properly presented to the Contracting Officer.
Client Alert | 4 min read | 08.10.26
Client Alert | 4 min read | 08.07.26
Missouri AG Sues Kansas City Over Race- and Sex-Based Contracting Program
Client Alert | 2 min read | 08.06.26
