Contractor Compliance with Cybersecurity Maturity Model Certification

This document is a guide addressing the compliance requirements for contractors associated with Trident Maritime Systems, LLC regarding the Cybersecurity Maturity Model Certification (CMMC). It outlines the interim rule published by the Department of Defense (DoD) on September 30, 2020, which mandates immediate action from the supply chain to qualify for awards. The guide details the necessity for government suppliers to ensure adequate security for covered contractor information systems, as defined by the Defense Federal Acquisition Regulation Supplement (DFARS). It specifies the implementation of security controls as per NIST Special Publication 800-171. The document further explains the new DFARS clauses that have been introduced, including requirements for self-assessments and the necessity for contractors to maintain their CMMC certification levels throughout the contract duration. Specific actions are recommended for suppliers to determine applicability and conduct necessary assessments to comply with these regulations.