SCB 2024….That’s a Wrap

Changes to the Aerospace Standards

Trainings and Webinars

Updated Timeline for CMMC Implementation

According to the latest updates, the CMMC implementation timeline sees the final rule becoming effective on December 16, 2024 with a phased rollout of CMMC requirements across new DoD contracts expected to begin in early to mid-2025; full implementation across all levels is anticipated to occur gradually over several years, with most contractors aiming for compliance by 2026-2028 depending on their CMMC level requirements.

Key points in the updated CMMC timeline:

• Final Rule Effective Date: December 16, 2024 
• Phase 1 Implementation Begins: Early to mid-2025 
• Phased Rollout: CMMC requirements will be gradually incorporated into new defense contracts over a period of time 
• Full Implementation Goal: Most DoD contractors are expected to achieve CMMC compliance by 2026-2028

Important Considerations:

• Early Preparation Crucial:

Even though full implementation is phased, contractors should begin assessing their cybersecurity posture and planning for CMMC compliance now to remain competitive in the defense market. 

CMMC Levels:

Different levels of CMMC compliance exist, with higher levels requiring more stringent cybersecurity practices. 

C3PAO Assessments:

Once ready, contractors will need to undergo assessments by a certified third-party assessment organization (C3PAO) to obtain CMMC certification. Please reach out to the staff at SCB for assistance. info@iapmoscb.org P: 909-390-4065

Upcoming ANAB Training Courses in January 2025

ANAB offers a mix of remote and in-person courses. These are on a multitude of relevant topics that can be found on the course schedule below. Courses are led by highly qualified assessors and industry experts with decades of experience in accreditation.

ISO 27001 Certification: What It Is And Why You Need It

Organizations handle vast amounts of sensitive data, including employee, supplier, and customer information, as well as intellectual property and financial records. Forbes.com highlights that failure to secure this data can lead to risks such as breaches, financial losses, reputational damage, and legal penalties. To address these challenges, the International Standard Organization (ISO) developed the ISO/IEC 27001:2013 standard, which provides guidelines for establishing, implementing, and maintaining effective information security management systems.

FDA Finalizes Rule Integrating ISO 13485 into New Quality Management System Regulation (QMSR)

On January 31, 2024, the FDA announced a final rule to modernize quality system requirements for medical devices by replacing its existing Quality System Regulation (QSR) with ISO 13485, an internationally recognized standard for medical device quality management systems. This update, effective February 2, 2026, aligns FDA regulations with global standards and supports the Medical Device Single Audit Program (MDSAP). The final rule amends 21 CFR Part 820 by requiring compliance with ISO 13485, plus additional requirements that are necessary to satisfy the Food, Drug & Cosmetic Act (FDCA). Manufacturers are not required to obtain certification to ISO 13485, however, nor will FDA rely on such certification for the conduct of its oversight activities.