What Is Cybersecurity Maturity Model Certification (CMMC) Compliance?
Cybersecurity Maturity Model Certification (CMMC) is a framework that the Department of Defense developed to ensure that contractors and subcontractors achieve and maintain predetermined levels of compliance to protect federal contract information (FCI) and controlled unclassified information (CUI).
What Is The Goal Of CMMC?
CMMC is designed to enhance security of FCI and CUI to thwart any country or person acting with malicious intent.
Who Needs To Be Compliant?
Any organization that handles FCI or CUI as part of its work as a contractor, subcontractor or supplier to the U.S government will need to attain CMMC certification.
What Does CMMC Require?
Under CMMC, the implementation of cybersecurity requirements may be assessed by authorized, independent, third party auditors.
Future government contracts will say whether an organization will need to be certified at level 1, 2 or 3. To be compliant, organizations will identify what level of certification they need and either self attest or apply for an auditor to help.
What Level Of CMMC Do You Need?
CMMC 2.0 will include three levels: foundational, advanced, and expert.
Foundational
At CMMC Level 1, basic safeguarding requirements are in place (such as antivirus software and physical security). Organizations who wish to achieve certifications at this level must implement 17 controls of NIST 800-171.
Advanced
At CMMC Level 2, assessors will ensure security requirements for CUI specified in NIST 800-171 are implemented.
Expert
CMMC Level 3 is focused on reducing the risk from Advanced Persistent Threats (APTs). The DoD is still determining the specific security requirements for the Level 3, but has indicated that its requirements will be based on NIST 800-171 110 controls plus a subset of NIST 800-172 controls.
What To Do Next
We've helped companies just like yours learn what steps to take to achieve compliance.
It can take months to become fully compliant and the controls outlined in NIST 800-171 provide the basis for CMMC compliance.
Learn more about CMMC
What Do I Need To Know About CMMC?
Questions about Cybersecurity Maturity Model Certification (CMMC)? A cybersecurity expert explains what's new and what it means.
Why Is It Important To Prepare Now For CMMC?
Organizations that meet the cybersecurity policies during CMMC assessment will qualify for opportunities to bid on government contracts and subcontracts.
All CMMC And IT Compliance Articles
Browse everything we have published on CMMC, NIST 800-171, HIPAA and wider IT compliance in one place.
Make Your IT Problems Go Away - 3 Easy Steps
Fill out the simple form.
Meet with an IT professional for a discovery call.
Never worry about your IT and let us bring the right solution to your business.
Leave your IT issues behind and try us risk free for 90 days.
Fill out our form.
.webp)