CMMC 2.0 Enforcement Begins for Defense Contractors

The U.S. Defense Department has started enforcing the Cybersecurity Maturity Model Certification (CMMC) program for defense contractors and subcontractors as of November 10, 2025. Contractors must complete Level 1 and Level 2 self-assessments to ensure compliance with requirements for protecting Federal Contract Information and Controlled Unclassified Information. The cybersecurity industry is preparing for these regulations, with companies like Huntress collaborating with DEFCERT to assist contractors in achieving compliance.