DFARS 7021: Cybersecurity Maturity Model Certification Requirements (CMMC)

Defense Federal Acquisition Regulation Supplement (#DFARS) 252.204-7021 is one of the three clauses in the DFARS 70 series (7012, 7019, 7020). DFARS 7021 is the only clause targeting Cybersecurity Maturity Model Certification requirements (#CMMC) and officially introduces CMMC into the federal regulatory and acquisition framework. Also, the Department of Defense (#DoD) is conducting a phased rollout of CMMC and all contracts, task orders, solicitations, etc. will have DFARS 7021 and CMMC requirements included by October 1, 2025. Many large scale contract vehicles are including this language in 2021 and 2022 acquisitions.

DFARS 70 Series Videos: