CMMC

• CMMC

  • Overview

    • CMMC stands for Cybersecurity Maturity Model Certification.
    • It is the Department of Defense (DoD)'s mechanism for validating that defense contractors implement required cybersecurity practices, including those from NIST/800-171.

  • Relationship to NIST/800-171

    • NIST/800-171 defines security requirements for protecting Controlled Unclassified Information (CUI) in nonfederal systems.
    • CMMC is the certification and assessment framework used to verify conformance to those requirements for relevant DoD contracts.