The Defense Department\u2019s long-awaited proposed rule for the Cybersecurity Maturity Model Certification program lays out DoD\u2019s plan to introduce the CMMC requirements over the next three years.\nThe proposed rule,\xa0released today\xa0and scheduled to be published in the Federal Register on Dec. 26, would establish requirements \u201cfor a comprehensive and scalable assessment mechanism\u201d to ensure defense contractors are implementing required security protections.\nDoD already has a provision in its contracts requiring companies that handle controlled unclassified information to protect it in accordance with controls\xa0set by the National Institute of Standards and Technology.\xa0\nLearn more about your ad choices. Visit podcastchoices.com/adchoices