dockets: DOD-2023-OS-0063

Regulatory dockets from Regulations.gov — containers for related documents and comments in a rulemaking proceeding.

Data license: Public Domain (U.S. Government data) · Data source: Federal Register API & Regulations.gov API

This data as json

id agency_id title docket_type last_modified object_id rin dkabstract category subtype keywords program short_title effective_date organization attrs_raw attr_source
DOD-2023-OS-0063 DOD Cybersecurity Maturity Model Certification (CMMC) Program Rulemaking 2024-10-15T09:04:30Z 0b00006485cd71fe 0790-AL49 DoD is proposing to establish requirements for a comprehensive and scalable assessment mechanism to ensure defense contractors and subcontractors have, as part of the Cybersecurity Maturity Model Certification (CMMC) Program, implemented required security measures to expand application of existing security requirements for Federal Contract Information (FCI) and add new Controlled Unclassified Information (CUI) security requirements for certain priority programs. DoD currently requires covered defense contractors and subcontractors to implement the security protections set forth in the National Institute of Standards and Technology (NIST) Special Publication (SP) 800–171 Rev 2 to provide adequate security for sensitive unclassified DoD information that is processed, stored, or transmitted on contractor information systems and to document their implementation status, including any plans of action for any NIST SP 800–171 Rev 2 requirement not yet implemented, in a System Security Plan (SSP). The CMMC Program provides the Department the mechanism needed to verify that a defense contractor or subcontractor has implemented the security requirements at each CMMC Level and is maintaining that status across the contract period of performance, as required.     ["Government Procurement", "Contracts", "Controlled Unclassified Information", "Federal Contract Information", "Certification", "Cybersecurity", "CMMC Levels", "CMMC Program", "CMMC"]   CMMC   DoD CIO {"displayProperties": [{"name": "organization", "label": "Organization", "tooltip": "Identifies docket's (a regulatory action) orginating agency and/or department, equivalents: Division, Pre-EDOCKET ID."}, {"name": "shortTitle", "label": "Short Title", "tooltip": "A combination of letters and or numbers assigned to an agency's regulatory action for purposes of brevity."}], "keywords": ["Government Procurement", "Contracts", "Controlled Unclassified Information", "Federal Contract Information", "Certification", "Cybersecurity", "CMMC Levels", "CMMC Program", "CMMC"], "modifyDate": "2024-10-15T09:04:30Z", "dkAbstract": " DoD is proposing to establish \nrequirements for a comprehensive and \nscalable assessment mechanism to \nensure defense contractors and \nsubcontractors have, as part of the \nCybersecurity Maturity Model \nCertification (CMMC) Program, \nimplemented required security \nmeasures to expand application of \nexisting security requirements for \nFederal Contract Information (FCI) and \nadd new Controlled Unclassified \nInformation (CUI) security requirements \nfor certain priority programs. DoD \ncurrently requires covered defense \ncontractors and subcontractors to \nimplement the security protections set \nforth in the National Institute of \nStandards and Technology (NIST) \nSpecial Publication (SP) 800\u2013171 Rev 2 \nto provide adequate security for \nsensitive unclassified DoD information \nthat is processed, stored, or transmitted \non contractor information systems and \nto document their implementation \nstatus, including any plans of action for \nany NIST SP 800\u2013171 Rev 2 \nrequirement not yet implemented, in a \nSystem Security Plan (SSP). The CMMC \nProgram provides the Department the \nmechanism needed to verify that a \ndefense contractor or subcontractor has \nimplemented the security requirements \nat each CMMC Level and is maintaining \nthat status across the contract period of \nperformance, as required. ", "agencyId": "DOD", "program": null, "shortTitle": "CMMC", "subType2": null, "title": "Cybersecurity Maturity Model Certification (CMMC) Program", "generic": null, "field1": null, "docketType": "Rulemaking", "petitionNbr": null, "rin": "0790-AL49", "organization": "DoD CIO", "legacyId": null, "subType": null, "category": null, "field2": null, "effectiveDate": null, "objectId": "0b00006485cd71fe"} single_get

Links from other tables