1. Home
  2. |Insights
  3. |CMMC Clause Rule: What to Know

CMMC Clause Rule: What to Know

Webinar | 09.15.25, 12:00 PM EDT - 1:00 PM EDT

The Department of Defense (DoD) has released the highly anticipated second final rule for the Cybersecurity Maturity Model Certification Program (CMMC), ushering in its mandatory implementation that begins on November 10. CMMC is a unified assessment model released by the DoD in response to the growing threat of cyberattacks on and data theft from the Defense Industrial Base.  This program requires every DoD contractor that handles sensitive government data to certify compliance with certain cybersecurity controls.  CMMC brings greater scrutiny to contractors’ cybersecurity compliance and greater risks associated with compliance failures. To achieve certification, contractors must prove that their organizations can meet a myriad of security control obligations, a process that can be daunting without familiarity with the policies, procedures, and practices that will be required when the program is finalized.

Join us as we discuss CMMC in a live panel webinar featuring Privacy & Cybersecurity and Government Contracts attorneys who have been following the evolution of the DoD’s approach to contractor cybersecurity since its inception.  Our panel will include Michael Gruden, Kate Growley, Jacob Harrison, Jessica Chao, and Alexis Ward.

Topics will include:

  • Overview of the final rule and new CMMC DFARS clauses
  • CMMC certification and attestation requirements
  • Timeline for CMMC contract requirements
  • Attestation and certification enforcement risks
  • CMMC supply chain management

 

For more information, please visit these areas: Government Contracts

Participants

Insights

Webinar | 03.12.26

On-Going Government Audits of Small Business Programs: Why the Federal Government’s Focus on ‘Waste, Fraud, and Abuse’ Impacts Both Large and Small Contractors

The federal government has identified purported ‘waste, fraud, and abuse’ in small business programs as a major focus of its current enforcement efforts. As it relates to federal procurement, we have seen audits and investigations rolled out not only of active participants in the Small Business Administration’s 8(a) Business Development Program but also reviews of various types of small business contracts (such as 8(a) sole source and set-aside awards, preference-based awards, and small business set-aside awards over particular values). Join Crowell & Moring as we discuss what aspects of contract performance and teaming arrangements are being scrutinized (e.g., size/status eligibility, limitations on subcontracting compliance, reasonableness of market rates, etc.) and how these considerations can impact both small government contractors holding the prime contracts under review and their subcontractors. ...