It's about to get a lot harder for private companies that are lax on cybersecurity to get a contract with the Pentagon, as the Defense Department has finalized a rule requiring contractor compliance with its Cybersecurity Maturity Model Certification (CMMC) program. The final rule, which was released as a preview ahead of its formal publication in the Federal Register on Wednesday, will go into effect on November 9.