H.J. Res. 40 119th Congress House

Providing for congressional disapproval under chapter 8 of title 5, United States Code, of the rule submitted by the Department of Defense relating to "Cybersecurity Maturity Model Certification…

Official title: Providing for congressional disapproval under chapter 8 of title 5, United States Code, of the rule submitted by the Department of Defense relating to "Cyberse… Show full official titleShow less

Official title: Providing for congressional disapproval under chapter 8 of title 5, United States Code, of the rule submitted by the Department of Defense relating to "Cybersecurity Maturity Model Certification (CMMC) Program".

Introduced: February 12, 2025 Introduced by: Andrew S. Clyde Republican · Georgia See on congress.gov

Armed Forces and National Security Administrative law and regulatory proceduresComputer security and identity theftCongressional oversightDepartment of Defense

More subjectsShow fewer subjects

Intelligence activities, surveillance, classified informationPublic contracts and procurement

Everywhere this bill has been 2 steps

Introduced

In committee

Reported out

Passed House

Passed Senate

To President

Became law

Feb 12, 2025

Referred to the House Committee on Armed Services.

Feb 12, 2025

Introduced in House

Ask about this bill AI · grounded in the bill text

Have a question about what this bill does? Ask in plain English; the answer is drawn from the bill's actual text and official record, and it'll tell you when something isn't in the text rather than guess.

AI answers can be imperfect; always confirm against the full bill text.

What's happening now February 12, 2025

Referred to the House Committee on Armed Services.

Plain-English summary Congressional Research Service

This joint resolution nullifies the Department of Defense (DOD) rule titled Cybersecurity Maturity Model Certification (CMMC) Program (89 Fed. Reg. 83092) and published on October 15, 2024. Among other elements, the rule establishes the Cybersecurity Maturity Model Certification Program. The program institutes policies regarding the protection of Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) that is processed, stored, or transmitted on defense contractor and subcontractor information systems during defense contract performance. The rule also identifies entities to which the rule applies and describes DOD implementation of the program.

Bill text 1 version

Introduced in House Formatted Text PDF Formatted XML

Source documents hosted by congress.gov.

Committees of jurisdiction 1

Armed Services Committee
House of Representatives

Cite this page click to expand

APA

U.S. Congress. (2026). H.J. Res. 40: Providing for congressional disapproval under chapter 8 of title 5, United States Code, of the rule submitted by the Department of Defense relating to "Cybersecurity Maturity Model Certification (CMMC) Program".. 119th Congress. Open America. https://openamerica.io/bill/119-HJRES-40/

MLA

"H.J. Res. 40: Providing for congressional disapproval under chapter 8 of title 5, United States Code, of the rule submitted by the Department of Defense relating to "Cybersecurity Maturity Model Certification (CMMC) Program".." 119th Congress, 2026, Open America, https://openamerica.io/bill/119-HJRES-40/.

Bluebook (legal)

H.J. Res. 40, 119th Cong. (2026), https://openamerica.io/bill/119-HJRES-40/.

Markdown link

[H.J. Res. 40: Providing for congressional disapproval under chapter 8 of title 5, United States Code, of the rule submitted by the Department of Defense relating to "Cybersecurity Maturity Model Certification (CMMC) Program".](https://openamerica.io/bill/119-HJRES-40/)