CMMC language is in GSA’s latest contracts, but requirements will be order-specific

Any new cybersecurity requirements the General Services Administration asks of contractors will be introduced at the order — not the contract — level, according to the deputy assistant commissioner of IT acquisition. https://www.fedscoop.com/cmmc-requirements-order-specific-gsa/