What it requires
- Hold, for the whole contract, the certification level that the contracting officer writes into the clause.
- Have a named official affirm each year, in the federal supplier risk system, that the systems still meet that level.
- Keep contract information only on systems that hold that level.
Who it applies to
Government contractors.
The project that meets it
Sources
CMMC has a deadline.
David from SBK replies within one working day.