--- title: CMMC 2.0 Timeline — Where Are We Now? description: CMMC 2.0 is not going away. Here are updates on how DIB contractors are progressing to comply with DFARS 7012, NIST 800-171R2, and CMMC 2.0. image: https://www.daymarksi.com/hubfs/CMMC%202.0%20Timeline.png --- - [MICROSOFT SERVICE OFFERINGS](https://www.daymarksi.com/microsoft-service-offerings) - [CONTACT](https://www.daymarksi.com/location-for-our-new-england-office-massachusetts) - [SUPPORT](https://www.daymarksi.com/support) [![DM_LogoTag_white-20yr](https://www.daymarksi.com/hubfs/brand-assets/DM_LogoTag_white-20yr.png "DM_LogoTag_white-20yr")](https://www.daymarksi.com) - [About](https://www.daymarksi.com/about-daymark) - [Why Daymark](https://www.daymarksi.com/why-daymark) - [Leadership](https://www.daymarksi.com/leadership) - [Industry Awards](https://www.daymarksi.com/industry-awards) - [Daymark Solutions Charitable Trust](https://www.daymarksi.com/charitable-trust) - [Customers](https://www.daymarksi.com/customers) - [Testimonials](https://www.daymarksi.com/testimonials) - [Technical Certifications](https://www.daymarksi.com/technical-certifications) - [Careers](https://www.daymarksi.com/careers) - [Locations](https://www.daymarksi.com/location-for-our-new-england-office-massachusetts) - [Solutions](https://www.daymarksi.com/solutions) - [Cloud Solutions](https://www.daymarksi.com/cloud) - [CMMC Compliance](https://www.daymarksi.com/understanding-the-cybersecurity-maturity-model-certification) - [Data Center Infrastructure](https://www.daymarksi.com/solutions/data-center-infrastructure-for-storage-networking-compute-security) - [Data Protection](https://www.daymarksi.com/solutions/data-protection-backups-recovery-restore) - [Networking](https://www.daymarksi.com/solutions/networking-and-security) - [Security](https://www.daymarksi.com/solutions/networking-and-security) - [Virtualization](https://www.daymarksi.com/solutions/virtualization) - [All Technology Partners](https://www.daymarksi.com/partners) - Cloud - [Microsoft Azure](https://www.daymarksi.com/microsoftazure) - [Microsoft Azure Government](https://www.daymarksi.com/protecting-government-data-for-the-defense-industrial-base) - [Microsoft 365](https://www.daymarksi.com/microsoft-365) - [Copilot for Microsoft 365](https://www.daymarksi.com/copilot-for-microsoft-365) - [Microsoft 365 GCC High](https://www.daymarksi.com/microsoft-gcc-high-for-defense-contractors) - [Mimecast](https://www.daymarksi.com/cloud) - [Okta](https://www.daymarksi.com/cloud) - [All Cloud Partners](https://www.daymarksi.com/cloud-partners) - [Services](https://www.daymarksi.com/services) - [Microsoft Service Offerings](https://www.daymarksi.com/microsoft-service-offerings) - [Assessment & Health Checks](https://www.daymarksi.com/services/assessment-and-health-checks) - [Cloud Architecture](https://www.daymarksi.com/services/custom-cloud-computing-implementations-and-services-in-new-england) - [CMMC Compliance Readiness](https://www.daymarksi.com/understanding-the-cybersecurity-maturity-model-certification) - [Contract & Maintenance Management](https://www.daymarksi.com/services/contract-maintenance-management) - [Documentation & Knowledge Transfer](https://www.daymarksi.com/services/documentation) - [Government Community Cloud](https://www.daymarksi.com/microsoft-gcc-high-for-defense-contractors) - [Identity Mangement](https://www.daymarksi.com/microsoft-entra-id-workshop) - [Implementations](https://www.daymarksi.com/services/it-project-implementation-on-budget-on-time-on-scope) - [Proof of Concepts](https://www.daymarksi.com/services/proof-of-concept-for-information-technology-initiatives) - [Solution Architecture](https://www.daymarksi.com/services/it-solution-architecture-for-complex-storage-network-and-computer-solutions) - [Staging & Integration](https://www.daymarksi.com/services/staging-and-integration) - [MyDaymark](https://www.daymarksi.com/mydaymark/) - [Advanced Support](https://www.daymarksi.com/mydaymark/advanced-support) - [Premier Support](https://www.daymarksi.com/mydaymark/premier-support) - [Managed Services](https://www.daymarksi.com/mydaymark/managed-services) - [Management Platform](https://www.daymarksi.com/mydaymark/management-platform) - [Security & Compliance](https://www.daymarksi.com/mydaymark/security-compliance) - Industries - [Energy & Utilities](https://www.daymarksi.com/new-england-it-project-management-and-implementation-for-energy-and-utilities-industry) - [Financial Services](https://www.daymarksi.com/new-england-it-project-implementation-for-financial-services-companies) - [Defense Industrial Base](https://www.daymarksi.com/protecting-government-data-for-the-defense-industrial-base) - [Healthcare](https://www.daymarksi.com/healthcare-information-technology-development-and-implementation) - [Life Sciences](https://www.daymarksi.com/new-england-it-initiative-implementation-for-life-sciences-companies) - [Resources](https://www.daymarksi.com/information-technolocy-resources) - [Case Studies](https://www.daymarksi.com/information-technolocy-resources?types=casestudy) - [Data Sheets](https://www.daymarksi.com/information-technolocy-resources?types=datasheet) - [Partner Resources](https://www.daymarksi.com/information-technolocy-resources?types=partnerresources) - [Workshops](https://www.daymarksi.com/information-technolocy-resources?types=workshop) - [News & Events](https://www.daymarksi.com/news-events) - Blog - [Daymark IT Insights](https://www.daymarksi.com/blog) - [Cole Tramp's Microsoft Insights](https://www.daymarksi.com/blog/topic/cole-tramps-microsoft-insights) ![banner-why-daymark.jpg](https://www.daymarksi.com/hs-fs/hub/30865/file-2671640025-jpg/2015_Images/Banner_Images/banner-why-daymark.jpg?width=1400&name=banner-why-daymark.jpg "banner-why-daymark.jpg") ##### **Daymark IT Insights** Enterprise IT, cloud, security, and AI guidance from Daymark’s technology experts. # [CMMC 2.0 Timeline — Where Are We Now?](https://www.daymarksi.com/blog/cmmc-2.0-timeline-where-are-we-now) Posted by [Ken Bergeron](https://www.daymarksi.com/blog/author/ken-bergeron) Thu, Aug 24, 2023 - [Tweet](https://twitter.com/share) ![CMMC 2.0 Timeline](https://www.daymarksi.com/hs-fs/hubfs/CMMC%202.0%20Timeline.png?width=1920&height=1280&name=CMMC%202.0%20Timeline.png) It’s been almost a year since we wrote about the [risks of delaying CMMC (Cybersecurity Maturity Model Certification) compliance](https://www.daymarksi.com/information-technology-navigator-blog/the-risks-of-delaying-cmmc-2.0-compliance). The only thing that has remained constant since then is that CMMC is not going away. There have been many noteworthy recent developments in the DoD supply chain news space related to updates for DIB contractors to comply with the DFARS 7012 requirements to safeguard CUI (controlled unclassified information) data. The CMMC 2.0 final rulemaking timeline continues to shift from over the horizon to right around the corner, and the recently released NIST 800-171 revision 3 draft amplifies concerns about upcoming changes to the framework requiring additional protections for prime and subprime organizations supplying the DoD. Progress to Date So, how much progress have DIB contractors made toward CMMC? At best, improvements in protecting our nation’s cybersecurity and compliance posture are already complete for organizations that are in compliance with current NIST 800-171R2 requirements and working towards CMMC assessment completion. Then there are organizations who are playing catchup, implementing some of the outlined controls in the original NIST 800-171 requirements, but not yet near full compliance. And at worst, there are the organizations that are keeping their heads firmly planted in the sand, hoping CMMC will just go away. Wherever your organization is along the compliance journey, Daymark Solutions can help. We continue to lead in support of our nation’s efforts to protect our warfighters against real world threats from nation-state enemies. We’ve curated a comprehensive, full breadth of [implementation and compliance services](https://www.daymarksi.com/understanding-the-cybersecurity-maturity-model-certification) across Microsoft’s full stack and related 3rd party solutions for both cloud and on-premises environments to help DIB organizations establish a mature security and compliance posture to ensure [CMMC assessment readiness](https://www.daymarksi.com/cmmc-compliance-starts-here). **Start Your Compliance Journey Today**   The upcoming months will be critical for organizations to prepare for CMMC 2.0, and finding an experienced RPO (Registered Provider Organization) is more important than ever in order to fully understand the timeline of CMMC 2.0, the rules that are in place today, as well as the skills required to ensure organizations are assessment-ready — before CMMC requirements are enforced and show up in contracts. Given these factors, we are quickly transitioning our clients from the "early adopters" phase of CMMC, to ensure that they do not miss the boat. Our Government Services Team provides the services and solutions required for CMMC readiness. We help DIB contractors as small as 10 and as large as up to 6,000 users with the following: - Mapping existing security and compliance policies to CMMC controls and provide gap analysis and CMMC documentation deliverables - Building secure enclaves using Swivel Seat and green field methodologies - Designing and implementing complex hybrid or full cloud IaaS and PaaS secure environments - Migrating data, applications and systems from existing environments to secure enclaves - Ensuring readiness for CMMC self-assessment with step-by-step, pre-audit guidance  [Contact us](https://www.daymarksi.com/cmmc-compliance-starts-here) to start your compliance journey today.     ### Subscribe to Daymark Insights ### Latest Posts ### Browse by Tag - [Microsoft (88)](https://www.daymarksi.com/blog/topic/microsoft) - [Cloud (70)](https://www.daymarksi.com/blog/topic/cloud) - [Cole Tramp's Microsoft Insights (58)](https://www.daymarksi.com/blog/topic/cole-tramps-microsoft-insights) - [Azure (55)](https://www.daymarksi.com/blog/topic/azure) - [Security (49)](https://www.daymarksi.com/blog/topic/security) - [Data Protection (43)](https://www.daymarksi.com/blog/topic/data-protection) - [Microsoft Fabric (41)](https://www.daymarksi.com/blog/topic/microsoft-fabric) - [Data Governance (38)](https://www.daymarksi.com/blog/topic/data-governance) - [AI (35)](https://www.daymarksi.com/blog/topic/ai) - [Partners (33)](https://www.daymarksi.com/blog/topic/partners) - [Compliance (31)](https://www.daymarksi.com/blog/topic/compliance) - [Data Center (30)](https://www.daymarksi.com/blog/topic/data-center) - [CMMC (27)](https://www.daymarksi.com/blog/topic/cmmc) - [Backup (26)](https://www.daymarksi.com/blog/topic/backup) - [Daymark News (23)](https://www.daymarksi.com/blog/topic/daymark-news) - [Storage (22)](https://www.daymarksi.com/blog/topic/storage) - [GCC High (19)](https://www.daymarksi.com/blog/topic/gcc-high) - [Veritas (18)](https://www.daymarksi.com/blog/topic/veritas) - [Virtualization (18)](https://www.daymarksi.com/blog/topic/virtualization) - [Cybersecurity (17)](https://www.daymarksi.com/blog/topic/cybersecurity) - [Azure AI Foundry (16)](https://www.daymarksi.com/blog/topic/azure-ai-foundry) - [Featured Gov (16)](https://www.daymarksi.com/blog/topic/featured-gov) - [Government Cloud (16)](https://www.daymarksi.com/blog/topic/government-cloud) - [Disaster Recovery (15)](https://www.daymarksi.com/blog/topic/disaster-recovery) - [Cloud Backup (14)](https://www.daymarksi.com/blog/topic/cloud-backup) - [Managed Services (13)](https://www.daymarksi.com/blog/topic/managed-services) - [Copilot (11)](https://www.daymarksi.com/blog/topic/copilot) - [Industry Expertise (9)](https://www.daymarksi.com/blog/topic/industry-expertise) - [NIST SP 800-171 (7)](https://www.daymarksi.com/blog/topic/nist-sp-800-171) - [Hybrid Cloud (6)](https://www.daymarksi.com/blog/topic/hybrid-cloud) - [Networking (6)](https://www.daymarksi.com/blog/topic/networking) - [Power BI (6)](https://www.daymarksi.com/blog/topic/power-bi) - [Pure Storage (4)](https://www.daymarksi.com/blog/topic/pure-storage) - [Reporting (3)](https://www.daymarksi.com/blog/topic/reporting) - [Services (3)](https://www.daymarksi.com/blog/topic/services) - [AI for Defense (2)](https://www.daymarksi.com/blog/topic/ai-for-defense) - [Cloud Security (2)](https://www.daymarksi.com/blog/topic/cloud-security) - [Everpure (2)](https://www.daymarksi.com/blog/topic/everpure) - [GDPR (2)](https://www.daymarksi.com/blog/topic/gdpr) - [Microsoft Purview (2)](https://www.daymarksi.com/blog/topic/microsoft-purview) - [Apple (1)](https://www.daymarksi.com/blog/topic/apple) - [CMMC 2.0 Requirements (1)](https://www.daymarksi.com/blog/topic/cmmc-2-0-requirements) - [FedRamp AI (1)](https://www.daymarksi.com/blog/topic/fedramp-ai) - [Mobile (1)](https://www.daymarksi.com/blog/topic/mobile) - [Power Automate (1)](https://www.daymarksi.com/blog/topic/power-automate) [see all](https://www.daymarksi.com/blog/cmmc-2.0-timeline-where-are-we-now#) ### How Can We Help?  [![Speak With An Expert](https://no-cache.hubspot.com/cta/default/30865/5de282fd-640c-49b2-bf45-603dbee66842.png)](https://cta-redirect.hubspot.com/cta/redirect/30865/5de282fd-640c-49b2-bf45-603dbee66842) #### About Daymark Solutions is an experienced technology integration and solutions provider that helps organizations effectively architect, implement, and deploy customized solutions to help their customers grow and scale their IT infrastructure. Specializing in AI, cloud and modern data center solutions, Daymark’s unique combination of in-depth technical knowledge, extensive experience, and proven methodologies enable its customers to successfully address even the most difficult technology challenges. #### Connect      #### Links - [About](https://www.daymarksi.com/about-daymark) - [Industry Expertise](https://www.daymarksi.com/industry-experience-in-finance-healthcare-energy-utilities-and-life-sciences) - [Solutions](https://www.daymarksi.com/solutions) - [Services](https://www.daymarksi.com/services) - [Cloud](https://www.daymarksi.com/services/custom-cloud-computing-implementations-and-services-in-new-england) - [Resources](https://www.daymarksi.com/whitepapers-videos-analyst-reports-and-case-studies-on-information-technologies) - [News & Events](https://www.daymarksi.com/news-events) - [Blog](https://www.daymarksi.com/blog) #### Contact **Corporate Headquarters** Daymark Solutions 131 Middlesex Turnpike Burlington, MA 01803 **Corporate:** [+1 781-359-3000](tel:17813593000) **Email:** [info@daymarksi.com](mailto:info@daymarksi.com) ![DM_LogoTag_white.png](https://www.daymarksi.com/hs-fs/hubfs/Daymarksi-2017/Image/DM_LogoTag_white.png?width=176&name=DM_LogoTag_white.png "DM_LogoTag_white.png") © 2026 Daymark Solutions, Inc. All rights reserved.  |  [Daymark Privacy Policy](https://www.daymarksi.com/hubfs/Daymark%20-%20Privacy%20Policy.pdf) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Ken Bergeron", "url" : "https://www.daymarksi.com/blog/author/ken-bergeron" }, "dateModified" : "2023-08-24T14:29:45.234Z", "datePublished" : "2023-08-24T14:29:45.000Z", "headline" : "CMMC 2.0 Timeline — Where Are We Now?", "image" : [ "https://www.daymarksi.com/hubfs/CMMC%202.0%20Timeline.png" ], "mainEntityOfPage" : { "@id" : "https://www.daymarksi.com/blog/cmmc-2.0-timeline-where-are-we-now", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.daymarksi.com/hubfs/v2/images/daymark-logo.png" }, "name" : "Daymark Solutions, Inc." } } ```