Providing for congressional disapproval under chapter 8 of title 5, United States Code, of the rule submitted by the Department of Defense relating to "Cybersecurity Maturity Model Certification (CMMC) Program".

This joint resolution nullifies the Department of Defense (DOD) rule titled Cybersecurity Maturity Model Certification (CMMC) Program (89 Fed. Reg. 83092) and published on October 15, 2024. Among other elements, the rule establishes the Cybersecurity Maturity Model Certification Program. The program institutes policies regarding the protection of Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) that is processed, stored, or transmitted on defense contractor and subcontractor information systems during defense contract performance. The rule also identifies entities to which the rule applies and describes DOD implementation of the program.

[Congressional Bills 119th Congress]
[From the U.S. Government Publishing Office]
[H.J. Res. 40 Introduced in House (IH)]

<DOC>






119th CONGRESS
  1st Session
H. J. RES. 40

  Providing for congressional disapproval under chapter 8 of title 5, 
United States Code, of the rule submitted by the Department of Defense 
    relating to ``Cybersecurity Maturity Model Certification (CMMC) 
                               Program''.


_______________________________________________________________________


                    IN THE HOUSE OF REPRESENTATIVES

                           February 12, 2025

Mr. Clyde submitted the following joint resolution; which was referred 
                   to the Committee on Armed Services

_______________________________________________________________________

                            JOINT RESOLUTION


 
  Providing for congressional disapproval under chapter 8 of title 5, 
United States Code, of the rule submitted by the Department of Defense 
    relating to ``Cybersecurity Maturity Model Certification (CMMC) 
                               Program''.

    Resolved by the Senate and House of Representatives of the United 
States of America in Congress assembled, That Congress disapproves the 
rule submitted by the Department of Defense relating to ``Cybersecurity 
Maturity Model Certification (CMMC) Program'' (89 Fed. Reg. 83092 
(October 15, 2024)), and such rule shall have no force or effect.
                                 <all>