Cy Sack

CMMC Is Now in DFARS – What This Means for Industry The Program Office drives the CMMC Level based on the classification of the DATA. As a contracting officer, I want to ensure our industry partners clearly understand what just happened. On September 10, 2025, DoD issued the final rule for DFARS Case 2019-D041: Assessing Contractor Implementation of Cybersecurity Requirements. This rule formally incorporates CMMC 2.0 into the DFARS, effective November 10, 2025. For anyone doing business with DoD—and specifically with SOCOM—this is no longer “in development.” CMMC is now law in regulation. What this means for contractors: • CMMC Level will be dictated by the data. If your contract involves Federal Contract Information (FCI), expect a Level 1 requirement. If you handle Controlled Unclassified Information (CUI), a Level 2 or higher requirement will apply. • No award without compliance. Before contract award, option exercise, or performance extension, your CMMC status must be current in the Supplier Performance Risk System (SPRS). • Annual affirmation is required. A senior company official will have to certify compliance each year. • Flow down matters. Subcontractors handling FCI or CUI must meet the same requirements. What you should be doing now: • Conduct a NIST SP 800-171 self-assessment and post your score in SPRS. • Identify what CMMC level your systems must meet based on the sensitivity of the data you handle. • Begin remediation of gaps now—waiting until solicitation release will be too late. • If Level 2 certification is anticipated, engage with an authorized C3PAO for third-party assessment. • Talk to your subcontractors—your compliance is only as strong as your supply chain. Cybersecurity is now a baseline requirement for doing business with SOCOM. Just as we assess cost, schedule, and performance, we will also assess your ability to protect mission data. This is where acquisition and industry must work together: protecting our nation’s information is just as critical as delivering equipment and services on time. https://lnkd.in/ensCS98D #DFARS #CMMC #Cybersecurity #SOCOM #Acquisition #Contracting

51

3 Comments

NEW CO Podcast EPISODE # 548 Listen here: https://lnkd.in/gRmgzdmt How the DoD Acquisition System rewrite aligns with flexibility already in the FAR. The world of defense contracting is changing fast, and this episode breaks down what that means for you. Today, the team takes a close look at the new Warfighting Acquisition System and how it affects the work of contracting officers. Kevin welcomes Hector Navarro, a retired Marine Corps Contracting Officer, who brings real world experience and clear insight. Hector explains new terms, new roles, and why these changes matter. Together, they step back to explore the big picture, then walk through the details in a simple and direct way. This episode is not just about rules. It is about how people make decisions, manage risk, and keep mission needs front and center. The team discuss how contracting officers balance long standing FAR rules with faster, portfolio driven demands. They also show why sound judgment and clear communication matter more than ever. Whether you work in government, support industry, or want to understand how acquisition is speeding up, this episode gives you what you need. It is clear, practical, and built to help you stay ready for what comes next. #contractingofficerpodcast #DoGovConWell #GovCon #Governmentcontracting #Podcast #Procurements #Acquisitions

6

2 Comments

91% of defense leaders want faster acquisition. But there is a gap: procurement timelines are compressing while deployment timelines aren't. The result? You're buying faster but fielding slower. Warfighters don't need procured technology. They need operational capability. Read how mission integration closes this gap: https://saic.co/mipov3li

45

3 Comments

Big news from April 2025 still echoing: The Pentagon's $𝟱.𝟭 𝗕𝗜𝗟𝗟𝗜𝗢𝗡 𝗰𝗼𝗻𝘁𝗿𝗮𝗰𝘁 𝗮𝘅𝗲! chopping IT & consulting deals. ✂️ This clearly signaled changes in defense spending. What got cut? • $𝟭.𝟴𝗕 in DHA consulting 🩺 • $𝟭.𝟰𝗕 Air Force cloud services  ☁️ • Other major IT & consulting agreements! The move stirred controversy around expertise, budget priorities, and even the role of outside influence. ⚖️ Are you seeing the long-term effects of this shake-up?

6

USSOCOM just awarded the $2.39B TREX 3 contract, enabling rapid procurement of ISR and C4 technologies to four firms: Barbaricum, Global Technical Systems, iGov, and NextTech Solutions. #governmentcontracting #trex #IDIQ #isr #c4 #govcon #defense https://lnkd.in/grqkj-xH

18