CMMC 2.0 could take as long as two years to come online

Federal News Network - The Pentagon is encouraging defense contractors to follow cybersecurity practices laid out by the National Institute of Standards and Technology, but new requirements will not show up in contracts for at least nine months, with the potential for the rulemaking process to stretch out as late as fall 2023.

Read article