No More "Wait & See" for CMMC: DoD Releases Final Cybersecurity Maturity Model Certification
Client Alert | 1 min read | 02.03.20
The Department of Defense (DoD) has released Version 1.0 of the Cybersecurity Maturity Model Certification (CMMC), Appendices A-F, and an Overview Briefing. While Version 1.0 largely mirrors the draft Version 0.7, the final version includes notable revisions, such as:
- Process and Practice Descriptions in Appendix B, which include discussions and clarifications for every “practice” within each CMMC Level, including the long-awaited examples for Levels 4 and 5; and
- Source Mapping in Appendix E, which maps each “practice” across all five Levels –171 in total – to other pre-existing cybersecurity frameworks.
Much, however, remains to be done. In anticipation of the DoD adopting “go/no-go” CMMC certification requirements later this year, a privately-run Accreditation Body is expected to begin training third-party assessors (3PAOs) this spring in conducting those certifications for contractors. Simultaneously, the DoD is expected to issue a proposed rule incorporating the CMMC into DFARS 252.204-7012, to be finalized this fall.
Contacts
Partner, Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 4 min read | 12.30.25
Are All Baby Products Related? TTAB Says “No”
The United States Trademark Trial and Appeal Board (TTAB or Board) recently issued a refreshed opinion in the trademark dispute Naterra International, Inc. v. Samah Bensalem, where Naterra International, Inc. petitioned the TTAB to cancel Samah Bensalem’s registration for the mark BABIES' MAGIC TEA based on its own BABY MAGIC mark. On remand from the U.S. Court of Appeals for the Federal Circuit, the TTAB reconsidered an expert’s opinion about relatedness of goods based on the concept of “umbrella branding” and found that the goods are unrelated and therefore again denied the petition for cancellation.
Client Alert | 6 min read | 12.30.25
Investor Advisory Committee Recommends SEC Disclosure Guidelines for Artificial Intelligence
Client Alert | 2 min read | 12.29.25
FYI – GAO Finds Key Person “Available” Despite Accepting Employment with a Different Company
Client Alert | 4 min read | 12.29.25
More Than Math: How Desjardins Recognizes AI Innovations as Patent-Eligible Technology
