Department of Defense Releases Long-Awaited DFARS Cybersecurity Final Rule for Government Contractors and Subcontractors

On September 10, 2025, the Department of Defense (DoD) published its long-awaited final rule amending the Defense Federal Acquisition Regulation Supplement (DFARS) to implement the Cybersecurity Maturity Model Certification (CMMC) program (the DFARS CMMC Final Rule). The DFARS CMMC Final Rule, which becomes effective on November 10, 2025, requires defense contractors and subcontractors to adhere to specific cybersecurity requirements based on the sensitivity of the information they handle……
By: Snell & Wilmer