On September 29, 2020, the DoD released an interim rule to begin including the CMMC framework in covered DoD contracts. The interim rule specifies that until September 25, 2025, the relevant CMMC solicitation and contract clauses should be used (only) in approved contracts. The DoD has asked military departments as well as field DoD components and field activities to nominate 15 upcoming contracts that are expected to be awarded in 2021 that could include CMMC requirements requests for solicitations and requests for proposals.
DoD’s provisional phase-in timeline for CMMC requirements for prime contractors and subcontractors is 1500, 7500, 25000 and 47,905 companies for years 2021-2024 respectively. Companies that have not attained the required CMMC level are ineligible for contracts approved for CMMC requirements.
- Understand the practices and processes required for specific CMMC levels
- Conduct a self-assessment and gap analysis
- Create a plan to correct deficiencies
- Execute the plan