DFARS Clause 252.204-7025 Notice of Cybersecurity Maturity Model Certification Level Requirements

DFARS Clause 252.204-7021 Contractor Compliance With the Cybersecurity Maturity Model Certification Level Requirements

CMMC Final Program Rule: 32 CFR Part 170

CMMC Final Acquisition Rule: 48 CFR Parts 204, 212, 217, and 252

FAR Clause 52.204-21 Basic Safeguarding of Covered Contractor Information Systems.

DoD Procurement Toolbox – Cybersecurity Policy and Regulations

DFARS Clause 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting

U.S Department of Defense Chief Information Officer Cybersecurity Certification Maturity Model (CMMC)