CMMC Compliance Reckoning for Defense Contractors Arrives

December 23, 2025

Rob McCormick

CEO, Avatara

Cybersecurity Maturity Model Certification requirements have officially descended upon the defense industrial base, the global network of businesses that produce materials, components and services to support the Defense Department, setting off something of a witching hour for a huge number of companies.

With DoD’s September publication of final rules, it could formally include CMMC requirements in its solicitations and contracts starting Nov. 10. It will be a phased-in scenario: within three years, nearly all DoD solicitations will stipulate that contractors must conform to one of three levels of cybersecurity requirements.‍

Read more from Avatara CEO, Rob McCormick, on Federal News Network.

Read full article

About Avatara

Headquartered in St. Louis, Avatara is the developer of Avatara Platform, a fully-managed, all-inclusive, IT systems-as-a-service platform that allows businesses to significantly cut their annual IT spend, while meeting the rising tide of security and compliance standards impacting industries throughout the world. Avatara solves the problem of increasing cost, complexity, and compliance – The Three C’s of IT. We eliminate the endless cycle of acquiring, building, and maintaining an ever-evolving technology foundation to run your business.

Since its founding over 20 years ago, Avatara has worked with hundreds of businesses spanning a range of industries, including defense contractors, manufacturing, architecture, engineering, construction, healthcare, legal, finance, and retail sectors, among many others.