Pentagon Finalizes Sweeping Cybersecurity Rule for Defense Contractors

Oct 24, 2024, 04:40 PM

The U.S. Department of Defense (DoD) has finalized a new rule introducing stringent cybersecurity requirements for defense contractors and subcontractors. This move is part of the DoD's Cybersecurity Maturity Model Certification (CMMC) program, which aims to enhance the protection of sensitive data within the defense industrial base. The rule mandates that contractors meet specific cybersecurity standards to be eligible for defense contracts. Concurrently, the Department of Justice (DOJ) and the Cybersecurity and Infrastructure Security Agency (CISA) have proposed a new national security program to regulate foreign access to sensitive data. This initiative seeks to prevent countries of concern from exploiting data of strategic national importance. Additionally, the Pentagon has finalized sweeping cybersecurity rules.