CMMC 2.0 is here—the Department of Defense (DoD) announced the revamped version of the Cybersecurity Maturity Model Certification (CMMC) on November 4, 2021. CMMC, a cybersecurity compliance program for defense contractors, is intended to verify that contractors are taking the appropriate cybersecurity practices and measures. Contractors in the Defense Industrial Base (DIB) have been following CMMC closely as it’s slowly being phased into notices, requirements, and solicitations.

On August 10, 2021, the U.S. Senate passed a $1.2 trillion bipartisan infrastructure bill, sending it to the House of Representatives for consideration. It is welcome news that an infrastructure bill is being discussed after years of Congressional inaction, but simply securing funding will not guarantee successful projects. An unprecedented combination of economic, social, and climate challenges will loom over the construction sector for years, making effective project management systems more necessary than ever. Before the first projects begin, government agencies and contractors alike should examine and take the necessary steps to improve their own project management infrastructure.

This blog was last updated on November 4, 2021. The White House COVID-19 Response Team recently announced that millions of federal contractors and subcontractors must be vaccinated against COVID-19 by January 4, 2022, unless they are granted a legal exemption. This order mandates both in-person and remote federal contractors, as well as employees who are working under a covered contract to get vaccinated. So, which contracts are considered “covered” under this order and what other COVID-19 protocols will contractors have to follow to remain compliant? Let’s break down the order:

On August 31, 2021, GSA proposed a rule to help GSA Schedule contractors perform on Federal Supply Schedule (FSS) orders beyond their contract term. This proposed rule would amend the GSA Acquisition Regulation (GSAR) to include an internal GSA policy of extending FSS orders for 5 years beyond the terms of an FSS contract. As a reminder, the GSA Schedule is also referred to as the Federal Supply Schedule (FSS) and the Multiple Award Schedule (MAS), so this order directly affects GSA contractors.

As a businessperson, you are probably always looking for new ways to unleash the untapped potential of your company. This can involve offering new solutions, entering new markets, and researching your competitors to gain an advantage. Many of the same business development tactics can translate over to the federal government sphere. As a commercial company, you can sell your products and services to the government, provided you meet all the requirements. However, you cannot simply start filling orders for government agencies—you typically need to become a government contractor first. As you have probably witnessed throughout your life, federal government processes are heavily regulated, and that includes procurement.

Since the Cybersecurity Maturity Model Certification (CMMC) was first announced in 2020, it has undergone several changes. As the Department of Defense (DoD) and other government agencies look to deploy CMMC within government contracting, they will continue to adapt the verification method so it’s more effective.