Providing for congressional disapproval under chapter 8 of title 5, United States Code, of the rule submitted by the Department of Defense relating to "Cybersecurity Maturity Model Certification (CMMC) Program".

HJRES 40 is a congressional disapproval resolution targeting a Department of Defense rule about the Cybersecurity Maturity Model Certification (CMMC) Program. It directs Congress to reject the specific rule (published October 15, 2024) that would have required defense contractors to meet new cybersecurity standards under the CMMC framework. If passed, this resolution would stop the rule from taking effect, directly affecting defense contractors who would have otherwise needed to comply with the CMMC requirements. The resolution uses a standard procedural mechanism under federal law to nullify the rule without creating new policy.