Cybersecurity Maturity Model Certification (CMMC)
The Cybersecurity Maturity Model Certification (CMMC) program enhances cyber protection standards for companies in the DIB. It is designed to protect sensitive unclassified information that is shared by the Department with its contractors and subcontractors. The program incorporates a set of cybersecurity requirements into acquisition programs and provides the Department increased assurance that contractors and subcontractors are meeting these requirements.
CMMC requires that companies entrusted with national security information implement
cybersecurity standards at progressively advanced levels, depending on the type and sensitivity of the
information. The program also sets forward the process for information flow down to subcontractors.
CMMC assessments allow the Department to verify the implementation of
clear cybersecurity standards
Once CMMC is fully implemented, certain DoD contractors that
handle sensitive unclassified DoD information will be required to achieve a particular CMMC level as a
condition of contract award.
Cybersecurity is a Top Priority for the Department of Defense
The Defense Industrial Base (DIB) is the target of increasingly frequent and complex cyberattacks. To protect
American ingenuity and national security information, the DoD developed CMMC 2.0 to dynamically enhance
DIB cybersecurity to meet evolving threats and safeguard the information that supports and enables our
warfighters.
CMMC 2.0 Compliance
In November 2021, the Department announced “CMMC 2.0,” an updated program structure and requirements designed to achieve the primary goals of the internal review:
Establishes three progressively sophisticated levels, depending on the type of information:
- Level 1 (Foundational) – for companies with FCI only; information re—quires protection but is not critical to national security
- Level 2 (Advanced) — for companies with CUI
- Level 3 (Expert) — for the highest priority programs with CUI
Why OCD Tech?
The Government Compliance Services Team at OCD Tech is committed to assisting all members of the Defense
Industrial Base (DIB), large or small, as well as other executive agencies such as the Department of Energy, NASA, Department of Education, and the Department of State with their many IT compliance needs.
Since the inception of the DFARS 252.204-7012 clause and the self-attestation requirement associated with NIST 800-171, OCD Tech has been there to help clients fulfill their contractual obligations. Now, with CMMC, our firm continues to leverage our expertise in the defense space to aid organizations in the DIB with this new framework. Let us help you!