DOD Publishes Video Overview of CMMC Program and Logistics

DOD Publishes Video Overview of CMMC Program and Logistics

WHAT: On February 16, 2024, the U.S. Department of Defense (DOD) posted a 40-minute video overview of DOD’s proposed requirements for the Cybersecurity Maturity Model Certification (CMMC) program. The video is available here, and there is an accompanying notice in the Federal Register with a link to the video. As many contractors get ready to work with and use the CMMC program, any guidance from the government may help them understand compliance challenges.


The video discusses the proposed rule that DOD published on December 26, 2023, which outlines the CMMC program’s security, assessment, and affirmation requirements for contractors that handle federal contract information and controlled unclassified information. Comments on the proposed rule are still due by February 26, 2024. We previously summarized the proposed rule here.


WHAT DOES THIS MEAN FOR INDUSTRY: DOD released the video to “improve understanding of the proposed CMMC requirements and increase impact of the public comment period.” If you have been following the CMMC program over the last few years, you’ll already be familiar with the main points DOD emphasized throughout the video.


  • DOD will use the CMMC program to verify contractor compliance with existing cybersecurity requirements.

  • DOD is implementing the CMMC program through two related rulemakings: (1) a “program rule” will amend Title 32 of the Code of Federal Regulations (this is what DOD proposed on December 26, 2023), and (2) an “acquisition rule” will amend the DFARS, which appears in Title 48 of the Code of Federal Regulations (this remains pending in DFARS Case 2019-D041).

  • DOD intends to publish a proposed version of the acquisition rule “this year.”

  • DOD plans to s ..

    Support the originator by clicking the read the rest link below.