CMMC Requirements Begin Showing up in Defense Contracts Today!
- Triumvirate Cyber
- Nov 10
- 1 min read
The day has finally come! It's November 10, 2025, marking the effective date for DFARS Case 2019-D041, also called the CMMC Clause Rule. As of today, CMMC requirements will start showing up in contracts for the U.S. Department of Defense (DoD).
The CMMC Clause Rule updates 48 CFR Parts 204, 212, 217, and 252 to formally add CMMC requirements to DoD contracts through clauses such as DFARS 252.204-7021. As of today, CMMC requirements will begin being introduced into defense contracts.
CMMC Requirements Already Showing Up in Contracts
In fact, we've already seen six solicitations over the past week published on SAM.gov including callouts related to CMMC requirements—four of which explicitly mention CMMC Level 2 with wording similar to:
"Cybersecurity Maturity Model Certificate (CMMC) Level 2 applies to this contract. Requirement will be included in the solicitation document for the selected firms."
Learn More & Get Assistance
Want to learn more about how CMMC requirements will impact you? Check out our Insights library for a wide range of information on the requirements or Contact Us to schedule a free consultation!
