Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Why No Two CMMC Assessments Feel the Same

With the final CMMC program Rule now codified in 32 CFR Part 170, the DoD has activated its companion acquisition rule in 48 CFR, making DFARS 252.204-7021 enforceable as of November 10, 2025. This date marks the start of Phase 1 of the DoD’s rollout. From that point forward, contractors handling FCI or CUI must meet the CMMC level specified in their solicitation and maintain a current CMMC status filed in SPRS to remain eligible for contract award.