CMMC will have a phased rollout expected in early 2025, requiring compliance for all defense contracts.
Levels of compliance include self-assessment and third-party assessments to improve cybersecurity effectiveness.
Clarifying definitions of Controlled Unclassified Information enhances protections against adversarial threats.