On November 10, 2025, the DoD’s Defense Federal Acquisition Regulation Supplement (DFARS) changes to implement the contractual requirements related to the Cybersecurity Maturity Model Certification (CMMC) 2.0 program went into effect1, making CMMC compliance mandatory for contractors handling Federal Contract Information (FCI) or Controlled Unclassified Information (CUI). This impacts most small...

