On Aug. 15, the Department of Defense (DoD) published a second proposed rule for the Cybersecurity Maturity Model Certification (CMMC) program that places unified cybersecurity and information security requirements on DoD contractors and subcontractors. As AGC previously reported, the first proposed rule issued in December 2023 focused on the CMMC program and corresponding cybersecurity requirements for DoD prime and subcontractors. This latest proposed rule supplements the first proposes rule. Importantly, it contains DFARS...


