No More "Wait & See" for CMMC: DoD Releases Final Cybersecurity Maturity Model Certification
Client Alert | 1 min read | 02.03.20
The Department of Defense (DoD) has released Version 1.0 of the Cybersecurity Maturity Model Certification (CMMC), Appendices A-F, and an Overview Briefing. While Version 1.0 largely mirrors the draft Version 0.7, the final version includes notable revisions, such as:
- Process and Practice Descriptions in Appendix B, which include discussions and clarifications for every “practice” within each CMMC Level, including the long-awaited examples for Levels 4 and 5; and
- Source Mapping in Appendix E, which maps each “practice” across all five Levels –171 in total – to other pre-existing cybersecurity frameworks.
Much, however, remains to be done. In anticipation of the DoD adopting “go/no-go” CMMC certification requirements later this year, a privately-run Accreditation Body is expected to begin training third-party assessors (3PAOs) this spring in conducting those certifications for contractors. Simultaneously, the DoD is expected to issue a proposed rule incorporating the CMMC into DFARS 252.204-7012, to be finalized this fall.
Contacts
Partner, Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 2 min read | 09.18.25
On September 9, 2025, the U.S. Department of Health and Human Services (HHS) and the Food and Drug Administration (HHS) issued a news release announcing an “aggressive[]” “crackdown” on direct-to-consumer pharmaceutical advertising. This release came on the heels of a Presidential Memorandum President Trump issued the same day directing HHS to “ensure transparency and accuracy in direct-to-consumer prescription drug advertisements,” and the FDA to “take action to enforce legal requirements that advertisements for prescription drugs be truthful and not misleading.”
Client Alert | 3 min read | 09.17.25
Client Alert | 4 min read | 09.17.25
Client Alert | 5 min read | 09.16.25
Bucking the Odds: Why Technology Companies Should Embrace Software Patents Today
