DoD Mandates Cyber Certs: Contractors, Lock Down Your Systems!
Published Date: 9/10/2025
Rule
Summary
The Department of Defense is updating its rules to make sure contractors follow new cybersecurity standards called the Cybersecurity Maturity Model Certification (CMMC). This change affects companies working with the DoD and helps protect important defense information. Contractors should get ready to meet these new rules soon, which could impact how they do business and spend money on cybersecurity.
Analyzed Economic Effects
1 provisions identified: 0 benefits, 1 costs, 0 mixed.
DoD Requires CMMC for Contractors
If your company contracts with the Department of Defense, the DFARS rule now incorporates contractual requirements from the Cybersecurity Maturity Model Certification (CMMC) program. You will need to implement the CMMC cybersecurity standards in DoD contracts, which could change how you do business and may require spending on cybersecurity.
Personalized for You
How does this regulation affect your finances?
Personalize government policy and PRIA will tell you what this federal register document means for your household, plus every other regulation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Key Dates
Department and Agencies
Related Federal Register Documents
2026-09038, Defense Federal Acquisition Regulation Supplement: Disclosure of Greenhouse Gas Emissions (DFARS Case 2024-D021)
Starting May 7, 2026, the Department of Defense won’t make most new defense contractors share their greenhouse gas emissions unless it’s really needed for the contract. This change helps nontraditional contractors avoid extra paperwork, but DoD can still ask for info if it’s directly tied to the job. It’s a smart move to keep things fair and focused without slowing down important defense work.
2026-09067, Defense Federal Acquisition Regulation Supplement: Mitigating Risks Related to Foreign Ownership, Control, or Influence (DFARS Case 2021-D011)
The Department of Defense is updating rules to make sure companies working with them reveal if they’re owned or controlled by foreign folks. This helps keep our defense projects safe from hidden foreign influence. If you’re a contractor or subcontractor, get ready to share ownership info by July 6, 2026, or risk delays in your contracts.
2026-17485, Information Collection Requirement; Organizational Conflicts of Interest in Major Defense Acquisition Programs
The Defense Acquisition Regulations System has submitted to OMB for clearance the following proposal for collection of information under the provisions of the Paperwork Reduction Act.
2026-16682, Information Collection Requirement; Defense Federal Acquisition Regulation Supplement (DFARS), DoD Mentor-Protégé Program
The Department of Defense wants to keep collecting info for its Mentor-Protégé Program, which helps businesses team up and grow. This extension affects about 96 businesses and won’t cost extra but asks for feedback by October 16, 2026. The goal is to make sure the info collected is useful and easy to provide for the next three years.
2026-15547, Information Collection Requirement; Defense Federal Acquisition Regulation Supplement; Publicizing Contract Actions
The Defense Acquisition Regulations System has submitted to OMB for clearance the following proposal for collection of information under the provisions of the Paperwork Reduction Act.
2026-15548, Information Collection Requirement; Defense Federal Acquisition Regulation Supplement (DFARS), Contract Financing
The Defense Acquisition Regulations System has submitted to OMB for clearance the following proposal for collection of information under the provisions of the Paperwork Reduction Act.
Previous / Next Documents
Previous: 2025-17320, Endangered and Threatened Wildlife and Plants; Similarity of Appearance Explanation for the Northern Distinct Population Segment of the Southern Subspecies of Scarlet Macaw
The U.S. Fish and Wildlife Service is explaining why they didn’t do a special look-alike analysis for the northern group of the southern scarlet macaw under the Endangered Species Act. This update affects how these colorful birds are protected and clears up legal questions from a court order. No new costs or deadlines are involved, just a clear and final explanation.
Next: 2025-17360, Amendment of United States Area Navigation (RNAV) Routes Q-64, T-414, and T-705, and Establishment of United States RNAV Routes T-461 and T-463; Eastern United States
The FAA is updating some flight paths in the eastern U.S. by changing routes Q-64, T-414, and T-705, and adding new routes T-461 and T-463. These changes help pilots fly safer and smoother with modern technology. Airlines and travelers can expect better air traffic flow soon, with no extra costs involved.