The Cybersecurity Maturity Model Certification is the US Department of Defense's program for verifying that contractors protect federal contract information and CUI. CMMC 2.0 has three levels: Level 1 (17 basic practices, self-assessed), Level 2 (the 110 NIST 800-171 requirements, mostly assessed by a C3PAO), and Level 3 (a subset of 800-172 enhanced requirements, government-assessed). The DoD's certification program — third-party-assessed maturity for the defense industrial base.
All frameworks · NIST SP 800-171 Rev 2 · NIST SP 800-53 Rev 5 · NIST Cybersecurity Framework 2.0
Features · Integrations · Pricing · Frameworks · Consultants · About · Blog