CMMC (Cybersecurity Maturity Model Certification)
The Cybersecurity Maturity Model Certification (CMMC) is a unified cybersecurity framework implemented by the U.S. Department of Defense (DoD) to protect the Defense Industrial Base (DIB) and ensure the safeguarding of sensitive unclassified information. The program, currently operating under CMMC 2.0, requires DoD contractors and subcontractors to implement specific security controls and undergo assessments to verify compliance. It was officially integrated into DoD contracts via a final rule published on September 10, 2025, with implementation beginning on November 10, 2025 . The framework is structured around three progressive levels based on the sensitivity of the information handled—Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Note: As of July 13, 2026, the Department of War (formerly DoD) announced the immediate suspension of CMMC Phase II requirements and established a reform task force to review the program; however, Phase I self-assessment requirements remain firmly in place
Document information
- Uploaded on
- October 5, 2026
- Number of pages
- 1
- Written in
- 2026/2027
- Type
- Exam (elaborations)
- Contains
- Questions & answers
