32 CFR Part 170 Key Takeaways

Introduction

On October 15, 2024 32 CFR Part 170 also known as the "CMMC Final Rule" is published to the Federal Register. Effective 60 days later, the CMMC program is in effect.

Below are some key considerations, changes, and details to know with this rule's publication. This page's intent is to capture key differences, address changes between the draft rule and final published version.

Link to the PDF: https://public-inspection.federalregister.gov/2024-22905.pdf

Link to the FAR: https://www.federalregister.gov/public-inspection/2024-22905/cybersecurity-maturity-model-certification-program

Timelines

Phased rollout, 48 CFR, blah blah

Security Protection Data

lorem ipsum

Security Protection Assets

lorem ipsum

External Service Providers

lorem ipsum

Managed Service Providers

are great

FedRAMP & Equivalency

lorem ipsum

Virtual Desktop Infrastructure

CRMA? More like CROHYAY