On Dec. 26, 2023, the U.S. Department of Defense released a proposed rule and guidance documents implementing the Cybersecurity Maturity Model Certification 2.0 Program. As proposed, CMMC 2.0 would require federal contractors and subcontractors competing for DOD contracts to demonstrate continued compliance with a range of cybersecurity measures to maintain eligibility for performing and winning new federal awards.