Message from General Computer Development 

Final CMMC Acquisition Rule Published

The wait is over—on October 31, the Department of Defense (DoD) officially published the Final Rule for the Cybersecurity Maturity Model Certification (CMMC) program. 

This marks a pivotal step in strengthening the cybersecurity posture of the Defense Industrial Base (DIB). The rule outlines the phased implementation of CMMC 2.0, including timelines, assessment requirements, and enforcement mechanisms.

🗓️CMMC Phase 1 Begins November 10: Self-Assessments Required

Starting November 10, 2025, Phase 1 of CMMC implementation kicks off. Contractors handling Federal Contract Information (FCI) must complete a self-assessment aligned with CMMC Level 1 and upload their results to the Supplier Performance Risk System (SPRS).

✅Action Required:

• Conduct your self-assessment using the CMMC Assessment Guide for Level 1
• Upload your results to SPRS by the deadline
• Ensure your score reflects your current cybersecurity posture

✍️Don’t Forget: Submit Your Affirmations in SPRS

A quick but critical reminder—every CMMC self-assessment must be accompanied by an affirmation statement signed by a senior company official. This attestation confirms the accuracy of your assessment and is required for SPRS submission.

📌No affirmation = non-compliance. 

Double-check that your submission includes this step to avoid delays or disqualification

Want to stay compliant? Now’s the time to review your current cybersecurity practices and prepare for upcoming requirements!

Holiday Travel? Don’t Take a Cyber Risk with You

As the holiday season approaches, many of us will be traveling, working remotely, or simply unplugging for a well-deserved break. But cybercriminals don’t take holidays—and they often target this exact window of lowered vigilance.

Here’s how to stay secure while enjoying your time off:

🔒 Before You Go

· Update your devices: Ensure all operating systems, apps, and antivirus software are current.

· Back up critical data: Store backups securely in the cloud or on encrypted drives.

· Set up remote access securely: Use VPNs and disable unnecessary services.

📱 While Traveling

· Avoid public Wi-Fi: Use a personal hotspot or VPN to protect your connection.

· Don’t auto-connect: Disable settings that automatically join open networks.

· Lock your devices: Use strong passcodes and biometric security. Never leave devices unattended—even in hotel rooms.

📧 Stay Alert

· Watch for phishing: Holiday-themed scams are common. Be wary of urgent emails or fake shipping notices.

· Limit access: Only use trusted devices for work-related tasks. Avoid logging into sensitive accounts from shared computers.

Cyber hygiene is just as important as hand hygiene—especially when you're on the move.

A Final Note...