DoD Finalizes DFARS Cybersecurity Certification Rule: What Contractors Need To Know

On September 10, 2025, the U.S. Department of Defense (DoD) published its final rule implementing the contractual requirements under the Cybersecurity Maturity Model Certification (CMMC) Program. The rule (CMMC DFARS Rule), which establishes compliance standards and annual affirmation requirements as a condition of contract award for applicable contracts, is effective November 10, 2025, to certain defense contracts and will be phased in over three years….
By: Skadden, Arps, Slate, Meagher & Flom LLP