Skip to main content

← Back to glossary

Term · 14. International Standards

CMMC (Cybersecurity Maturity Model Certification) CMMC

Framework Source: DoD CMMC 2.0
Personal Data Identity Security PAM Standards CMMC NIST

Definition

US Department of Defense framework certifying cybersecurity practices of Defense Industrial Base (DIB) contractors handling Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). CMMC 2.0 (2021) consolidated to 3 levels: Foundational (Level 1, basic safeguarding), Advanced (Level 2, NIST SP 800-171 compliance), Expert (Level 3, NIST SP 800-172 enhanced requirements). Phased rollout in DoD contracts from 2025.

Synonyms
  • CMMC 2.0
Application
Mandatory for DoD prime contractors and subcontractors handling FCI/CUI. IDM/IAM impact: MFA on all systems processing CUI, strict identity proofing (NIST SP 800-63 IAL2/AAL2 or higher), privileged access management, session monitoring for CUI access, identity federation aligned to FICAM.
Sources

Related terms

← Back to glossary  ·  Open in main list