DFARS 252.204-7021 - CMMC Requirements

DFARS clause 252.204-7021 mandates that contractors and subcontractors performing work for the Department of Defense meet the Cybersecurity Maturity Model Certification (CMMC) requirements specified in the solicitation. It defines the applicable CMMC level, assessment procedures, and obligations for protecting controlled unclassified information, and it allows contract termination or suspension for non-compliance.