What is CMMC?

The Acronym CMMC stands for the Cybersecurity Maturity Model Certification and is a way to standardize the cybersecurity posture of government contractors. The model contains regulations and requirements for businesses to stay up to date on their cybersecurity methods and controls. The CMMC also contains multiple levels of certifications that are defined down below. Click here for a more in depth description of what CMMC is as a whole and who it applies to.

The Cybersecurity Maturity Model Certification has 5 different levels in ascending order from least advanced to most advanced and require different levels of maintenance and upkeep.

Level 1

Level one of the CMMC model requires businesses to perform “basic cyber hygiene” in the form of antivirus software, changing passwords regulatory, etc. These practices are put in place to protect Federal Contract Information.

Level 2

Level 2 requires the documentation of intermediate cyber hygiene practices to protect Controlled Unclassified Information by implementing security requirements defined in Special Publication 800-171 Revision 2 from NIST.

Level 3

With level 3 certification all companies are required to have a managed plan in regards to practicing good cyber hygiene as defined by NIST security requirements.

Level 4

Companies must have a process for reviewing and understanding the effectiveness of practices used to protect against cyber threats.

Level 5

All companies are required to implement standardized processes to detect and respond to Advanced Persistent threats(APTs).

Make sure to stay up to date on CMMC regulations and how they impact your business.

Don’t Gamble With Your Security!

Corporate Information Technologies provides small to mid-market organizations with expert I.T. services including compliance assessment, cybersecurity penetration tests, and comprehensive business continuity planning services. Corporate Information Technologies can help organizations, quantify, create, refine, and mitigate the risks presented by business threatening disasters in whatever form they may be disguised. 

Don’t Gamble With Your Security  Contact us

Comments are closed

Learn More
error: Alert: This Content is protected!