Tag: DFARS

This Is Not a Drill: Department of Defense Issues Long-Awaited Final CMMC DFARS Rule

Michael Joseph Montalbano ●

After years of drafts and interim measures, the Department of Defense (“DOD”) has issued the final Defense Federal Acquisition Regulation Supplement (“DFARS”) rule implementing the Cybersecurity Maturity Model Certification (“CMMC”) program. This long-awaited development cements CMMC as a contractual requirement and clarifies key aspects of the rule’s certification, compliance, and oversight requirements.

How Will CMMC Work?

Under the final rule, every solicitation where a contractor may store, process, or transmit Federal Contract Information (“FCI”) or controlled unclassified information (“CUI”) will be assigned a CMMC level. Solicitations involving just FCI will have a CMMC Level 1 requirement. Solicitations involving non-Defense CUI will have a CUI Level 2 Self-Attestation requirement. Solicitations involving Defense CUI will have a CUI Level 2 third-party certification (i.e., C3PAO) requirement. Solicitations involving particularly sensitive DOD programs will have a Level 3 requirement. Level 3 requires an assessment by the Defense Industrial Base Cybersecurity Assessment Center (“DIBCAC”).

Continue reading “This Is Not a Drill: Department of Defense Issues Long-Awaited Final CMMC DFARS Rule”

DoD’s Final Rule on Enhanced Post-Award Debriefings Provides Offerors Clarity on Automatic Stay Deadlines and Access to Agency’s Redacted Source Selection Decisions

Robyn N. Burrows and Luke W. Meier


The Department of Defense (“DoD”) recently issued its final rule amending the Defense Federal Acquisition Regulation Supplement (“DFARS”) to provide offerors enhanced post-award debriefing rights. DoD has provided these enhanced debriefing procedures since 2018 through a FAR Class Deviation, allowing offerors to submit additional questions after receiving the post-award debriefing. Four years later, DoD’s final rule clarifies when the clock for an automatic stay begins in an enhanced debriefing and provides greater transparency by allowing unsuccessful offerors in certain procurements access to the agency’s redacted source selection decision.

We highlight below several key elements of the final rule:

Access to Redacted Source Selection Decision Document

The final rule requires DoD to provide the source selection decision document in certain circumstances, redacted to remove confidential and proprietary information of other offerors. For awards over $100 million, DoD must automatically provide the source selection decision during the debriefing. Small businesses and nontraditional defense contractors on procurements resulting in awards over $10 million and up to $100 million are also entitled to a copy of the decision but must specifically request it—the agency will not automatically provide it to offerors.

Continue reading “DoD’s Final Rule on Enhanced Post-Award Debriefings Provides Offerors Clarity on Automatic Stay Deadlines and Access to Agency’s Redacted Source Selection Decisions”
Exit mobile version
%%footer%%