The Department of Defense moved one step closer to a Cybersecurity Maturity Model Certification (CMMC) final rule when it recently sent its draft rule to the White House’s Office of Information and Regulatory Affairs (OIRA). OIRA will have 90 days to review before either sending the rule back or sending it to the Federal Register for public comments....


