What is CMMC?

The Cybersecurity Maturity Model Certification (CMMC) is a framework developed by the U.S. Department of Defense (DoD) to ensure that defense contractors and subcontractors adequately protect sensitive unclassified information, specifically Controlled Unclassified Information (CUI), stored on their systems. CMMC assesses and certifies a contractor's cybersecurity maturity level using a tiered system, ensuring appropriate security controls and practices are in place. This helps to reduce the risk of data breaches and safeguard national security information within the Defense Industrial Base (DIB).