Defense Federal Acquisition Regulation Supplement: Assessing Contractor Implementation of Cybersecurity Requirements (DFARS Case 2019-D041)
dfars-acquisition · Defense Federal Acquisition Regulations System · Rule · Published 2025-09-10 · Effective 2025-11-10 · 90 FR 43560
Document
Document number
2025-17359
Federal Register citation
90 FR 43560
CFR reference
48 CFR 204
Type
Rule
Action
Final rule.
Category
dfars-acquisition
Sub-agency
Defense Federal Acquisition Regulations System
Publication date
2025-09-10
Effective date
2025-11-10
DOD docket
Docket DARS-2020-0034
Abstract
DoD is issuing a final rule amending the Defense Federal Acquisition Regulation Supplement (DFARS) to incorporate contractual requirements related to the final Cybersecurity Maturity Model Certification program rule, titled Cybersecurity Maturity Model Certification Program. This final DFARS rule also partially implements a section of the National Defense Authorization Act for Fiscal Year 2020 that directed the Secretary of Defense to develop a consistent, comprehensive framework to enhance cybersecurity for the U.S. defense industrial base.