top of page

The Big Blog
CMMC Flow-Down Responsibilities: Under DFARS 252.204-7021 (NOV 2025) and 32 CFR Part 170
This article summarizes OSC's responsibilities under DFARS and the CMMC Final Rule for flow-down requirements. Because an OSC may handle both FCI and CUI and serve as a prime contractor on some contracts or a subcontractor on others, the material is organized around both distinctions. The type of information determines WHAT is required; the contract role determines WHO the obligations are owed to. Authoritative source citations appear throughout, with full references in the f
1 day ago7 min read
bottom of page
