Here are links to the text of the CMMC Proposed Rule:
32 CFR (CMMC Program)
Downloadable PDF of Federal Register text (this version has page numbers): https://public-inspection.federalregister.gov/2023-27280.pdf
Federal Register home page for CMMC and comments: https://www.federalregister.gov/documents/2023/12/26/2023-27280/cybersecurity-maturity-model-certification-cmmc-program
Docket Information (the rule agenda): https://www.regulations.gov/docket/DOD-2023-OS-0063
Public comments posted regarding rule: https://www.regulations.gov/document/DOD-2023-OS-0063-0001
Regulatory Impact Analysis 32 CFR Part 170 (analysis of changes and cost): https://www.regulations.gov/document/DOD-2023-OS-0063-0003
Initial Regulatory Flexibility Analysis 32 CFR (benefits and costs, impact to small business): https://www.regulations.gov/document/DOD-2023-OS-0063-0002
CMMC Guides (assessment guides, scoping, etc)
CMMC Guidance documents home and comments page: https://www.regulations.gov/docket/DOD-2023-OS-0096/document
Notice of Guidance for CMMC: https://www.regulations.gov/document/DOD-2023-OS-0096-0001
CMMC Model Overview: https://www.regulations.gov/document/DOD-2023-OS-0096-0006
Scoping Guide – CMMC Level 1: https://www.regulations.gov/document/DOD-2023-OS-0096-0007
Scoping Guide – CMMC Level 2: https://www.regulations.gov/document/DOD-2023-OS-0096-0003
Scoping Guide – CMMC Level 3: https://www.regulations.gov/document/DOD-2023-OS-0096-0008
Assessment Guide – CMMC Level 1: https://www.regulations.gov/document/DOD-2023-OS-0096-0002
Assessment Guide – CMMC Level 2: https://www.regulations.gov/document/DOD-2023-OS-0096-0005
Assessment Guide – CMMC Level 3: https://www.regulations.gov/document/DOD-2023-OS-0096-0004
Hashing Guide (used during assessments only): https://www.regulations.gov/document/DOD-2023-OS-0096-0009
Assessment Reporting Templates
Assessment reporting home and comments page: https://www.regulations.gov/document/DOD-2023-OS-0097-0001
Paperwork Reduction Act review: https://downloads.regulations.gov/DOD-2023-OS-0097-0001/content.docx
CMMC Level 2 Pre-Assessment Reporting: https://downloads.regulations.gov/DOD-2023-OS-0097-0001/attachment_2.xlsx
CMMC Level 2 Assessment Results Reporting: https://downloads.regulations.gov/DOD-2023-OS-0097-0001/attachment_4.xlsx
CMMC Level 3 Pre-Assessment Reporting Mock-up: https://downloads.regulations.gov/DOD-2023-OS-0097-0001/attachment_1.xlsx
CMMC Level 3 Assessment Results Reporting Mock-up: https://downloads.regulations.gov/DOD-2023-OS-0097-0001/attachment_3.xlsx
Hashing Guide (again): https://downloads.regulations.gov/DOD-2023-OS-0097-0001/attachment_5.docx
eMASS Reporting Job Aid for C3PAOs
eMASS job aid home and comments: https://www.regulations.gov/document/DOD-2023-OS-0097-0002
eMASS User Job Aid: https://downloads.regulations.gov/DOD-2023-OS-0097-0002/attachment_1.pdf
48 CFR (DFARS 252.204-7012, 7019)
48 CFR tracking page (due in 2024): https://www.reginfo.gov/public/do/eAgendaViewRule?pubId=202310&RIN=0750-AK81
Want other links to relevant guidance? Check our front page which has links to the full CMMC program.
Did we miss any links to the new CMMC Rule? Please comment and we will add them!
Webinar invite – CMMC Rule Review
Please register below for a webinar review of the CMMC Rule on December 27, 2023, 11:00am EST. If you can’t make it or missed it, register anyways and we will send you a link to the recording.
This webinar is hosted by Kieri Solutions (our sponsor).