98 tracked changes to the CMMC / DFARS regulatory text (eCFR amendments), federal rulemaking (Federal Register), and NIST cybersecurity publications open for comment — the load-bearing documents for a DIB program.
| Date | Kind | Section / document | |
|---|---|---|---|
| 2025-11-10 | eCFR | DFARS 252.204 (cyber clauses): 252.204-7025 Notice of Cybersecurity Maturity Model Certification Level Requirements. amended 2025-11-10 | source → |
| 2025-11-10 | eCFR | DFARS 252.204 (cyber clauses): 252.204-7021 Contractor Compliance With the Cybersecurity Maturity Model Certification Level Requirements. amended 2025-11-10 | source → |
| 2025-10-01 | eCFR | DFARS 252.204 (cyber clauses): 252.204-7007 Alternate A, Annual Representations and Certifications. amended 2025-10-01 | source → |
| 2025-09-10 | eCFR | DFARS 252.204 (cyber clauses): 252.204-7025 xxx amended 2025-09-10 | source → |
| 2025-09-10 | eCFR | DFARS 252.204 (cyber clauses): 252.204-7021 Contractor Compliance with the Cybersecurity Maturity Model Certification Level Requirement. amended 2025-09-10 | source → |
| 2025-08-25 | eCFR | DFARS 252.204 (cyber clauses): 252.204-7007 Alternate A, Annual Representations and Certifications. amended 2025-08-25 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.14 CMMC Model. amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.23 Application to subcontractors. amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.8 Accreditation Body. amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.13 CMMC Certified Professional (CCP). amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.24 CMMC Scoring Methodology. amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.17 CMMC Level 2 certification assessment and affirmation requirements. amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.7 DCMA DIBCAC. amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.1 Purpose. amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.12 CMMC Instructor. amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.5 Policy. amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.18 CMMC Level 3 certification assessment and affirmation requirements. amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.4 Acronyms and definitions. amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.19 CMMC scoping. amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.20 Standards acceptance. amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.21 Plan of Action and Milestones requirements. amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.22 Affirmation. amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.15 CMMC Level 1 self-assessment and affirmation requirements. amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.3 Applicability. amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.9 CMMC Third-Party Assessment Organizations (C3PAOs). amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.6 CMMC PMO. amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.16 CMMC Level 2 self-assessment and affirmation requirements. amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.11 CMMC Certified Assessor (CCA). amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.10 CMMC Assessor and Instructor Certification Organization (CAICO). amended 2024-12-16 | source → |
| 2024-12-16 | eCFR | 32 CFR 170 (CMMC Program): § 170.2 Incorporation by reference. amended 2024-12-16 | source → |
| 2024-10-01 | eCFR | DFARS 252.204 (cyber clauses): 252.204-7007 Alternate A, Annual Representations and Certifications. amended 2024-10-01 | source → |
| 2024-09-26 | eCFR | DFARS 252.204 (cyber clauses): 252.204-7007 Alternate A, Annual Representations and Certifications. amended 2024-09-26 | source → |
| 2024-05-30 | eCFR | DFARS 252.204 (cyber clauses): 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting. amended 2024-05-30 | source → |
| 2023-12-07 | eCFR | DFARS 252.204 (cyber clauses): 252.204-7004 Antiterrorism Awareness Training for Contractors. amended 2023-12-07 | source → |
| 2023-11-17 | eCFR | DFARS 252.204 (cyber clauses): 252.204-7007 Alternate A, Annual Representations and Certifications. amended 2023-11-17 | source → |
| 2023-11-17 | eCFR | DFARS 252.204 (cyber clauses): 252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements. amended 2023-11-17 | source → |
| 2023-11-17 | eCFR | DFARS 252.204 (cyber clauses): 252.204-7020 NIST SP 800-171 DoD Assessment Requirements. amended 2023-11-17 | source → |
| 2023-05-25 | eCFR | DFARS 252.204 (cyber clauses): 252.204-7006 Billing Instructions—Cost Vouchers. amended 2023-05-25 | source → |
| 2023-03-22 | eCFR | DFARS 252.204 (cyber clauses): 252.204-7024 Notice on the Use of the Supplier Performance Risk System. amended 2023-03-22 | source → |
| 2023-03-01 | eCFR | DFARS 252.204 (cyber clauses): 252.204-7018 Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services. amended 2023-03-01 | source → |