Are there any insider thoughts on when the Cybersecurity Risk Management Construct guidance will be rolled out?

If you are referencing CMMC, it is ridiculous gov’t bureaucracy at its finest. CMMC is centered around protecting CUI. CUI is unclassified information. It is a waste of time and money.

@Charles Farrior

See 90 Fed. Reg. 43560 https://www.govinfo.gov/app/details/FR-2025-09-10/2025-17359 effective November 10, 2025

Department of War Construct Guidance https://www.war.gov/News/Releases/Release/Article/4314411/department-of-war-announces-new-cybersecurity-risk-management-construct/

@Charles Farrior are you asking if someone has inside info to fill in the dates for the construct elements????

@Neil Roberts I think you answered the question. We are going to have to wait for the DoD implementation guidance before we take any action(s).