DoD final CMMC rule and ISACA credentialing rollout
Public Sector Action
Summary
Hide ▲
Show ▼
The US Department of Defense published the final CMMC rule, starting a three-year rollout of cybersecurity requirements across DoD contracts. The change matters because contractors handling FCI and CUI must meet stricter controls to keep working in the defense supply chain. ISACA's new role as global credentialing authority and CAICO formalizes how the program will train, test, and certify assessors through 2028.
Timeline
-
17.12.2025 16:05 1 articles · 5mo ago
DoD publishes final CMMC rule
Legal Policy Action UpdateThe US Department of Defense published the final Cybersecurity Maturity Model Certification (CMMC) rule in the Federal Register, formalizing cybersecurity requirements for defense contractors that handle Federal Contract Information (FCI) and Controlled Unclassified Information (CUI).
Show sources
- ISACA Named Global Credentialing Authority for DoD’s CMMC Program — www.infosecurity-magazine.com — 17.12.2025 16:05
-
17.12.2025 16:05 1 articles · 5mo ago
CMMC rule takes effect and rollout begins
Industry Or Public Sector UpdateThe final CMMC rule took effect, launching a three-year rollout of cybersecurity requirements across DoD contracts through 2028 and requiring organizations supplying or working into the DoD to maintain a CMMC credential.
Show sources
- ISACA Named Global Credentialing Authority for DoD’s CMMC Program — www.infosecurity-magazine.com — 17.12.2025 16:05
-
17.12.2025 16:05 2 articles · 5mo ago
ISACA named global CMMC credentialing authority
Initial DisclosureThe US Department of Defense appointed ISACA as the global credentialing authority for the Cybersecurity Maturity Model Certification (CMMC) program and made it the exclusive CMMC Assessor and Instructor Certification Organization (CAICO), with ISACA saying the rollout will affect more than 200,000 organizations.
Show sources
- ISACA Named Global Credentialing Authority for DoD’s CMMC Program — www.infosecurity-magazine.com — 17.12.2025 16:05
- ISACA Named Global Credentialing Authority for DoD’s CMMC Program — www.infosecurity-magazine.com — 17.12.2025 16:05