Region
US
Focus
Maturity Model
Description
The Cybersecurity Maturity Model Certification (CMMC) is a framework developed to assess and enhance the cybersecurity practices of U.S. Department of Defense (DoD) contractors. It establishes a tiered system of five maturity levels, ensuring contractors can protect sensitive information like Controlled Unclassified Information (CUI). The model promotes compliance, strengthens supply chain security, and safeguards national security interests.
Key Details
- Developed by the US Department of Defense (DoD).
- Includes three maturity levels, ranging from Foundational (Level 1) to Expert (Level 3).
- Ensures contractors meet specific cybersecurity requirements before handling controlled unclassified information (CUI).
- Annual assessments are required for higher maturity levels.
More Information
Privacy note. Personal details in this revision have been removed, masked or replaced for privacy. The original is retained privately.