CMMC Insights | Sumble

What is CMMC?

The Cybersecurity Maturity Model Certification (CMMC) is a framework developed by the U.S. Department of Defense (DoD) to ensure that defense contractors and subcontractors adequately protect sensitive unclassified information, specifically Controlled Unclassified Information (CUI), stored on their systems. CMMC assesses and certifies a contractor's cybersecurity maturity level using a tiered system, ensuring appropriate security controls and practices are in place. This helps to reduce the risk of data breaches and safeguard national security information within the Defense Industrial Base (DIB).

Find organizations using CMMC on Sumble →

What other technologies are related to CMMC?

CMMC Competitor Technologies

ISO 27001

ISO 27001 is an international standard for information security management systems (ISMS). Organizations might choose to pursue ISO 27001 certification instead of or in addition to CMMC, depending on their business needs and customer requirements. While providing a similar function, they come from different governing bodies and may have varying interpretations.

mentioned alongside CMMC in 1% (968) of relevant job posts

CMMC Complementary Technologies

NIST 800-171

NIST 800-171 provides the security requirements that CMMC is built upon. It is essential for understanding and implementing CMMC.

mentioned alongside CMMC in 34% (955) of relevant job posts

DFARS

DFARS (Defense Federal Acquisition Regulation Supplement) clause 252.204-7012 mandates compliance with NIST 800-171, which is a core component of CMMC. DFARS is a regulation that requires contractors to protect covered defense information.

What is CMMC?

What other technologies are related to CMMC?

CMMC Competitor Technologies

CMMC Complementary Technologies

Which job functions mention CMMC?

Which organizations are mentioning CMMC?