CMMC 2.0 (Cybersecurity Maturity Model Certification v.2)
Region
US
Focus
Maturity Model
Description
The Cybersecurity Maturity Model Certification (CMMC) is a framework developed to assess and enhance the cybersecurity practices of U.S. Department of Defense (DoD) contractors. It establishes a tiered system of five maturity levels, ensuring contractors can protect sensitive information like Controlled Unclassified Information (CUI). The model promotes compliance, strengthens supply chain security, and safeguards national security interests.
Key Details
- Developed by the US Department of Defense (DoD).
- Includes three maturity levels, ranging from Foundational (Level 1) to Expert (Level 3).
- Ensures contractors meet specific cybersecurity requirements before handling controlled unclassified information (CUI).
- Annual assessments are required for higher maturity levels.