Site icon New Hampshire Manufacturing Extension Partnership | NH MEP

DoD Interim Rule for NIST SP 800-171 and CMMC

Cyber security and protection of private information and data concept. Locks on blue integrated circuit. Firewall from hacker attack.

FOR IMMEDIATE RELEASE
January 5, 2021

For more information please contact:
Eric Basta
Business Development Manager
ericb@nhmep.org

The DoD recently issued an Interim Rule to amend the Defense Federal Acquisition Regulation Supplement (DFARS), effective November 30, 2020.

A new mandatory construct was introduced with the rule called the DoD Assessment Methodology. The Interim Rule is designed to achieve phased implementation of both the newly required Assessment Methodology and the CMMC framework.

What’s the new DoD Assessment Methodology all about?

The DoD Assessment Methodology serves as an interim self-certification process before contractors undergo a full CMMC review.

The DoD Assessment Methodology requirement was developed to address perceived shortcomings in the self-attestation process conducted by contractors and their subcontractors with access to covered defense information (CDI) or controlled unclassified information (CUI) under DFARS clause 252.204-7012.

The methodology also includes a scoring system that assigns a weight to each NIST 800-171 requirement and subtracts points for all requirements that are not fully implemented.

How does the Interim Rule affect CMMC implementation?

With the Interim Rule, the DoD is gradually phasing in the rollout of CMMC. It won’t be until September 30, 2025 that all contracts over a micropurchase threshold will require CMMC certification. Until that time, the DoD will determine which solicitations will include the CMMC requirement.

If you would like to learn more about the DoD’s Interim Rule and CMMC implementation, contact Eric Basta at ericb@nhmep.org or (603) 724-0802.

About NH MEP
The NH MEP is an affiliate of the National Institute of Standards and Technology (NIST) under the U.S. Department of Commerce. The national MEP system is a network of manufacturing extension centers that provide business and technical assistance to smaller manufacturers in all 50 states, the District of Columbia and Puerto Rico. Through MEP, manufacturers have access to more than 2,000 manufacturing and business “coaches” whose job is to help firms make changes that lead to greater productivity, increased profits and enhanced global competitiveness. For more information please visit www.nhmep.org or call 603-226-3200.

 

Exit mobile version