Hold Onto Your Hats, DIB—The CMMC Contract Clauses Are Finally Live

As early as November 10, 2025, defense contractors could begin to see the long-awaited Cybersecurity Maturity Model Certification (“CMMC”) clauses included in contracts, solicitations, contract modifications, the exercise of contract options, or performance extensions. Until November 9, 2028, the new rule, sometimes called the CMMC Clause Rule, requires the Department of Defense (“DoD”) to include mandatory CMMC compliance language in contracts where the program office or requiring activity…
By: Nelson Mullins Riley & Scarborough LLP