← All News

48 CFR CMMC Rule Sent to Office of Management and Budget for Review

Department of Defense cybersecurity requirements document snippet.

The 48 CFR rule, a critical regulation tied to CMMC, was officially sent to the OMB for review — signaling the final stages of rulemaking before CMMC becomes enforceable across DoD contracts. Once OMB completes review and the rule is published in the Federal Register, CMMC requirements will start appearing in new solicitations impacting contractors working with CUI.