Photo credit Source : natlawreview.com
Key Information on CMMC Contract Clauses and Comment Period
The Department of Defense (DoD) is set to implement new contract clauses under the Cybersecurity Maturity Model Certification (CMMC) Program, with the comment period closing on October 15, 2024. Contractors will be required to maintain compliance with applicable controls throughout contract performance and notify contracting officers of any system changes. The DoD may issue final rules relating to both the CMMC program and contract clauses later this year or in early 2025.
The proposed contract clauses include requirements such as entering CMMC certificate or self-assessment results into the Supplier Performance Risk System (SPRS) at the specified CMMC level, affirming continuous compliance for contractor information systems handling federal contract information (FCI) or controlled unclassified information (CUI), and notifying contracting officers of any changes in these systems during contract performance.
Interested contractors are encouraged to submit their comments on the Proposed Rule by the deadline. DoD will review and adjudicate each comment before issuing the final rule. The final rules may be released later this year or in early 2025, marking the beginning of the CMMC program rollout.
Stay tuned for updates on the implementation of the CMMC Program and its impact on contractors in the defense industry.
