On October 15, 2024, the U.S. Department of Defense (DoD) finalized the rule establishing the Cybersecurity Maturity Model Certification (CMMC) Program, amending Title 32 of the Code of Federal Regulations. With this final rule, DoD establishes the Cybersecurity Maturity Model Certification (CMMC) Program to verify that contractors have implemented the required security measures necessary to safeguard federal contract information (FCI) and controlled unclassified information (CUI). The final rule became effective December 16, 2024.

• It will affect all prospective and actual DoD contractors and subcontractors who are handling or will handle DoD information that meets the standards for Federal Contract Information (FCI) or Controlled Unclassified Information (CUI) on a contractor information system during the performance of the DoD contract or subcontract. *Click here for DoD CMMC Program Rule press release.

It’s no secret that government agencies and their vendors are prime targets for cybercriminals, especially those working on behalf of adversaries of the United States. While efforts to identify and neutralize these threats have advanced significantly, completely preventing system compromises remains a formidable challenge.

Over the past several years, high-profile breaches like SolarWinds, the theft of 22 million federal employee records in the OPM breach attributed to China, and a surge in ransomware attacks have reshaped the cybersecurity landscape. Incidents such as spyware embedded in Kaspersky Labs software, surveillance tools like DJI drones with potential backdoors, and other vulnerabilities have made it clear: the world of cybersecurity is vastly different than it was just seven years ago.

Our Response: Expanding Cybersecurity Training for 2025 with a *NEW* Cybersecurity Institute program.

Given these challenges, we have developed a comprehensive new set of cybersecurity courses for 2025. These courses will modernize and revamp our current programs, equipping government contractors with the tools and knowledge to protect their systems, stay compliant, and remain resilient in an ever-changing cyber landscape.

Four of the Cybersecurity Institute's courses are half-day programs. When registering, please click on each course for detailed information about its specific schedule and timing.