Read more about the official release here: https://www.acq.osd.mil/cmmc/
Highlights of the changes:
- The intermediate levels will be removed (L2 and L4)
- CMMC (L1) will be moving to self-assessment
- A full return to DFAR252.204-7012(L1) and NIST 800-171(L3) with “new” CMMC criteria removed
- Return of the POAM (Plans of Action and Milestones)
- Level 3 Bifurcation – Certain contracts will require a require independent assessment and others will allow a self-assessment with annual company affirmation
- CMMC Level 5 requirements are still under development
This is an evolving situation and the information should be seen as advisory only. Aligned technology Solutions is monitoring closely and will keep you posted as we find out more.
