The CMMC requirements will feature a three-year "phased rollout," as the Pentagon continues to move forward with the massive cyber certification scheme.
