Review - OMB Approves CMMC Documents – 9-13-24

On Friday, the OMB’s Office of Information and Regulatory Affairs (OIRA) announced that it had approved nine documents related to updates to the DOD’s Cybersecurity Maturity Model Certification program. The documents include:

Final rule,

CMMC Model Overview

CMMC Assessment Guides (3 levels),

CMMC Scoping Guides (3 levels), and

CMMC Hashing Guide.                       

DOD continues to maintain their CMMC website, but notes that: “Updates to the CMMC website will be limited during the CMMC rulemaking process.”

I expect that the Final Rule and supporting guidance documents will be published in the Federal Register in the next week or two.

 

For more details about these CMMC documents, including links to the NPRM versions of the documents, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/omb-approves-cmmc-documents-9-13 - subscription required.