2022 saw a lot of changes to the CMMC program, and even to the government’s approach to supply chain cybersecurity. In this post, we summarize some of the key DoD-related changes in an effort to help contractors understand what they will likely encounter in 2023.
In our CMMC-related discussions, we often get questions regarding Section 889 of the National Defense Authorization Act (NDAA) of 2019. If you aren’t familiar with this requirement, or with FAR 52.204-24, FAR 52.204-25, and FAR 52.204-26, which make the requirements of Section 889 effective, Executive Branch agencies are prohibited “from procuring or obtaining, or extending (more…)