When is the CMMC requirement date for defense contractors?

The CMMC requirement date begins with a phased rollout starting in fiscal year 2025, following the finalization of the Defense Federal Acquisition Regulations (DFARs) rule. The CMMC requirement date timeline allows for self-attestation in the first phase, with Level 2 certifications required in subsequent contract awards based on program manager discretion. DoD estimates roughly 80,000 companies will need Level 2 certification and 1,500 will require Level 3. The CMMC requirement date implementation includes stricter POA&M closure requirements within six months, and contractors must provide annual NIST 800-171 compliance affirmations. Understanding the CMMC requirement date codification ensures defense contractors meet all regulatory obligations.