The Defense Department recently issued proposed rules for its Cybersecurity Maturity Model Certification Program (CMMC).