{"abstract":"DoD is issuing a final rule amending the Defense Federal Acquisition Regulation Supplement (DFARS) to incorporate contractual requirements related to the final Cybersecurity Maturity Model Certification program rule, titled Cybersecurity Maturity Model Certification Program. This final DFARS rule also partially implements a section of the National Defense Authorization Act for Fiscal Year 2020 that directed the Secretary of Defense to develop a consistent, comprehensive framework to enhance cybersecurity for the U.S. defense industrial base.","action":"Final rule.","agencies":[{"raw_name":"DEPARTMENT OF DEFENSE","name":"Defense Department","id":103,"url":"https://www.federalregister.gov/agencies/defense-department","json_url":"https://www.federalregister.gov/api/v1/agencies/103","parent_id":null,"slug":"defense-department"},{"raw_name":"Defense Acquisition Regulations System","name":"Defense Acquisition Regulations System","id":97,"url":"https://www.federalregister.gov/agencies/defense-acquisition-regulations-system","json_url":"https://www.federalregister.gov/api/v1/agencies/97","parent_id":103,"slug":"defense-acquisition-regulations-system"}],"body_html_url":"https://www.federalregister.gov/documents/full_text/html/2025/09/10/2025-17359.html","cfr_references":[{"chapter":null,"citation_url":null,"part":204,"title":48},{"chapter":null,"citation_url":null,"part":212,"title":48},{"chapter":null,"citation_url":null,"part":217,"title":48},{"chapter":null,"citation_url":null,"part":252,"title":48}],"citation":"90 FR 43560","comment_url":null,"comments_close_on":null,"correction_of":null,"corrections":[],"dates":"This rule is effective November 10, 2025.","disposition_notes":null,"docket_ids":["Docket DARS-2020-0034"],"dockets":[{"supporting_documents":[{"title":"2019-D041 (p) RIA","document_id":"DARS-2020-0034-0195"},{"title":"2019-D041 (i) RIA","document_id":"DARS-2020-0034-0002"}],"agency_name":"DARS","documents":[{"comment_count":0,"comment_start_date":"2025-09-10","updated_at":"2025-09-10T10:56:34.299-04:00","comment_url":"https://www.regulations.gov/commenton/DARS-2020-0034-0293","allow_late_comments":false,"id":"DARS-2020-0034-0293","comment_end_date":null,"regulations_dot_gov_open_for_comment":false}],"supporting_documents_count":2,"id":"DARS-2020-0034","title":"Defense Federal Acquisition Regulation Supplement:  Strategic Assessment and Cybersecurity Certification Requirements (DFARS Case 2019-D041)"}],"document_number":"2025-17359","effective_on":"2025-11-10","end_page":43577,"executive_order_notes":null,"executive_order_number":null,"explanation":null,"full_text_xml_url":"https://www.federalregister.gov/documents/full_text/xml/2025/09/10/2025-17359.xml","html_url":"https://www.federalregister.gov/documents/2025/09/10/2025-17359/defense-federal-acquisition-regulation-supplement-assessing-contractor-implementation-of","images":{},"images_metadata":{},"json_url":"https://www.federalregister.gov/api/v1/documents/2025-17359?publication_date=2025-09-10","mods_url":"https://www.govinfo.gov/metadata/granule/FR-2025-09-10/2025-17359/mods.xml","not_received_for_publication":null,"page_length":18,"page_views":{"count":46897,"last_updated":"2026-05-01 10:15:05 -0400"},"pdf_url":"https://www.govinfo.gov/content/pkg/FR-2025-09-10/pdf/2025-17359.pdf","presidential_document_number":null,"proclamation_number":null,"public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2025-17359.pdf?1757421911","publication_date":"2025-09-10","raw_text_url":"https://www.federalregister.gov/documents/full_text/text/2025/09/10/2025-17359.txt","regulation_id_number_info":{"0750-AK81":{"issue":"202504","html_url":"https://www.federalregister.gov/regulations/0750-AK81/assessing-contractor-implementation-of-cybersecurity-requirements-dfars-case-2019-d041-","title":"Assessing Contractor Implementation of Cybersecurity Requirements (DFARS Case 2019-D041)","xml_url":"http://www.reginfo.gov/public/do/eAgendaViewRule?pubId=202504&RIN=0750-AK81&operation=OPERATION_EXPORT_XML","priority_category":"Other Significant"}},"regulation_id_numbers":["0750-AK81"],"regulations_dot_gov_info":{"supporting_documents":[{"title":"2019-D041 (p) RIA","document_id":"DARS-2020-0034-0195"},{"title":"2019-D041 (i) RIA","document_id":"DARS-2020-0034-0002"}],"regulatory_plan":{"html_url":"https://www.federalregister.gov/regulations/0750-AK81/assessing-contractor-implementation-of-cybersecurity-requirements-dfars-case-2019-d041-","title":"Assessing Contractor Implementation of Cybersecurity Requirements (DFARS Case 2019-D041)"},"comments_count":0,"agency_id":"DARS","comments_url":"https://www.regulations.gov/docketBrowser?rpp=50&so=DESC&sb=postedDate&po=0&dct=PS&D=DARS-2020-0034","supporting_documents_count":2,"docket_id":"DARS-2020-0034","document_id":"DARS-2020-0034-0293","regulation_id_number":"0750-AK81","title":"Defense Federal Acquisition Regulation Supplement:  Strategic Assessment and Cybersecurity Certification Requirements (DFARS Case 2019-D041)","checked_regulationsdotgov_at":"2025-09-11T17:55:04Z"},"regulations_dot_gov_url":null,"significant":true,"signing_date":null,"start_page":43560,"subtype":null,"title":"Defense Federal Acquisition Regulation Supplement: Assessing Contractor Implementation of Cybersecurity Requirements (DFARS Case 2019-D041)","toc_doc":"Assessing Contractor Implementation of Cybersecurity Requirements","toc_subject":"Defense Federal Acquisition Regulation","topics":["Government procurement"],"type":"Rule","volume":90}