Highlights

The U.S. Department of Defense (DOD) has issued the long-awaited final rule amending the Defense Federal Acquisition Regulation Supplement (DFARS) to implement the Cybersecurity Maturity Model Certification (CMMC) program.

The rule, effective Nov. 10, 2025, fundamentally changes how cybersecurity requirements are incorporated into DOD contracts and subcontracts.

This Holland & Knight alert breaks down the most critical aspects for contractors and the government contracts industry.

The U.S. Department of Defense (DOD) 1 has issued the long-awaited final rule amending the Defense Federal Acquisition Regulation Supplement (DFARS) to implement the Cybersecurity Maturity Model Certification (CMMC) program. This rule, effective Nov. 10, 2025, fundamentally changes how cybers

See Full Page