1. Home
  2. |Insights
  3. |No More "Wait & See" for CMMC: DoD Releases Final Cybersecurity Maturity Model Certification

No More "Wait & See" for CMMC: DoD Releases Final Cybersecurity Maturity Model Certification

Client Alert | 1 min read | 02.03.20

The Department of Defense (DoD) has released Version 1.0 of the Cybersecurity Maturity Model Certification (CMMC), Appendices A-F, and an Overview Briefing. While Version 1.0 largely mirrors the draft Version 0.7, the final version includes notable revisions, such as:

  • Process and Practice Descriptions in Appendix B, which include discussions and clarifications for every “practice” within each CMMC Level, including the long-awaited examples for Levels 4 and 5; and
  • Source Mapping in Appendix E, which maps each “practice” across all five Levels –171 in total – to other pre-existing cybersecurity frameworks.

Much, however, remains to be done. In anticipation of the DoD adopting “go/no-go” CMMC certification requirements later this year, a privately-run Accreditation Body is expected to begin training third-party assessors (3PAOs) this spring in conducting those certifications for contractors. Simultaneously, the DoD is expected to issue a proposed rule incorporating the CMMC into DFARS 252.204-7012, to be finalized this fall. 


Contacts

Insights

Client Alert | 4 min read | 03.05.26

DOL’s Proposed Independent Contractor Rule Reverts to Prioritize Two Core Factors – Likely Limiting Misclassification Claims by Contractors

The U.S. Department of Labor (DOL) has proposed another revision to independent contractor regulations, one that would provide for more leeway in classifying workers as contractors. DOL’s proposed rule, published on February 26, 2026, would rescind the Biden DOL’s March 2024 independent contractor regulation and reinstate a framework substantially tracking the prior Trump rule of January 2021. The proposed rule would also apply the narrower analysis to worker classifications under the Family and Medical Leave Act (FMLA) and the Migrant and Seasonal Agricultural Worker Protection Act (MSPA). The comment period closes in late April 2026; until then, the 2024 rule remains in effect for purposes of private litigation....

View All Insights