GroundRules
48 CFR 204.7500: 204.7500 Scope of subpart.
Where this section sits in the code
- Title 48—Federal Acquisition Regulations System
- CHAPTER 2—DEFENSE ACQUISITION REGULATIONS SYSTEM, DEPARTMENT OF DEFENSE
- SUBCHAPTER A—GENERAL
- PART 204—ADMINISTRATIVE AND INFORMATION MATTERS
- Subpart 204.75—Cybersecurity Maturity Model Certification
(a) This subpart prescribes policies and procedures for including the Cybersecurity Maturity Model Certification (CMMC) level requirements in DoD contracts. CMMC is a framework (see 32 CFR part 170) for assessing a contractor's information security protections.
(b) This subpart does not abrogate any other requirements regarding contractor physical, personnel, information, technical, or general administrative security operations governing the protection of unclassified information, nor does it affect requirements of the National Industrial Security Program.
(c) This subpart applies to unclassified contractor information systems.
Collected 2026-08-27T02:26:29Z. Source file · JSON