The Department of Defense submitted the CMMC Program rule to OIRA for final review and publication. OIRA has 90–120 days to review, putting the publication date between late September through late October. Once published in the Federal Register, the rule will be effective 60 days later, making the CMMC Program official.