A new Department of Defense rule requires contractors to undergo internal and sometimes third-party cybersecurity assessments related to how they handle sensitive information. A phased rollout will ...
DFARS 252.204-7021 imposes several ongoing obligations, including maintaining current CMMC status for all covered systems, flowing down requirements to subcontractors, submitting and updating CMMC ...