# DoD Proposes CMMC Rules for Moving Firms

The Department of Defense is considering moving-program rules that could increase CMMC Level 2 cybersecurity expectations for firms handling military moves. The rules are proposed, so the signal does not establish a current new compliance mandate or identify a specific contract opportunity. Separately, OPM is directing agencies to remind employees of protections for reporting suspected misconduct, VA plans to hire more than 2,000 claims processors in 2027, and the Census Bureau is researching automated business-survey data collection.

- Moving firms that work with DoD should evaluate their current cybersecurity capabilities against CMMC Level 2, while distinguishing proposed requirements from obligations currently in effect.
- The signal identifies no solicitation, contract value, or procurement deadline; it points to potential compliance implications rather than a confirmed award or bid opportunity.
- VA’s planned hiring and Census Bureau’s research describe agency workforce and data-collection developments, but the signal does not specify related procurements.

**Jurisdictions:** federal
**Industries:** Defense & Military
**Topics:** Cybersecurity, Regulatory Compliance
**Published:** October 30, 2026

### Government Entities
- Department of Defense (DoD)
- Office of Personnel Management (OPM)
- Department of Veterans Affairs (VA)
- U.S. Census Bureau

### Sources
- [
        OPM reminds federal employees about rights to report misconduct - Federal News Network](https://federalnewsnetwork.com/federal-newscast/2026/10/opm-reminds-federal-employees-about-rights-to-report-misconduct) - Federal News Network