DFARS 204.7500
Scope of subpart.
(a) This subpart prescribes policies and procedures for including the Cybersecurity Maturity Model Certification (CMMC) level requirements in DoD contracts. CMMC is a framework that measures a contractor’s cybersecurity maturity to include the implementation of cybersecurity practices and institutionalization of processes (see https://www.acq.osd.mil/cmmc/index.html ).. (b) This subpart does not abrogate any other requirements regarding contractor physical, personnel, information, technical, or general administrative security operations governing the protection of unclassified information, nor does it affect requirements of the National Industrial Security Program.
Source: acquisition.gov — DFARS
More parts
Have a solicitation to win?
Paste it into the free Contrax bid scorer — get an AI win-probability score with the FAR clauses that matter, in seconds. No signup required.