9 months ago

The https://www.upguard.com/blog/preparing-for-cmmc-compliance is a US Department of Defense (DoD) certification framework that aims to protect https://www.upguard.com/blog/sensitive-data handled by Defense Industrial Base (DIB) contractors by establishing a set of cybersecurity standards and best practices to follow. DIB partners often handle critical DoD information and other government data to operate, which typically has various levels of sensitivity and classification.

In early 2021, the DoD reviewed CMMC requirements and implementation on the strength of around 850 public comments about CMMC cybersecurity requirements and DOD contractors safeguarding https://www.upguard.com/blog/sensitive-data.

Whereas the CMMC 1.0 model had five levels of CMMC certification according to the type and sensitivity of information handled by the DoD contractor, the new CMMC program would have only three levels of certification.

For some programs, however, DoD contractors with level 2 CMMC 2.0 certification will require triennial self-assessment and annual affirmation.