Summary of Changes from DoD CMMC Proposed Rule to Final Rule

Keep up with what’s happening in privacy, data security, and all things cyber – from the U.S.’s CMMC program to the EU’s GDPR to China’s PIPL – from our Privacy, Cyber & Data Strategy Group.

Our Privacy, Cyber & Data Strategy Team updates the slow progress of the Cybersecurity Maturity Model Certification and the slower progress of clearing assessment organizations that can actually certify contractors.

An unprecedented cyber qui tam action involving Georgia Tech’s alleged failure to comply with certain cybersecurity controls underscores the importance of having advanced cyber requirements for federal contractors. Our Education, False Claims Act, and Privacy teams flesh out what businesses need to know.

The Department of Defense (“DoD”) recently announced it will be revamping the nascent Cybersecurity Maturity Model Certification (“CMMC”) program pending two separate rulemaking processes.  As detailed below, the DoD will be updating “the program structure and the requirements to streamline and improve implementation of the CMMC program.”  We will be monitoring the rulemaking process for […]

The post Department of Defense Suspends the CMMC Pilot Program And CMMC Requirements In DoD Solicitations Pending Major Changes For CMMC 2.0. appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog.