DevOps Articles

What is CMMC? Useful Resources, Communities & Expert Advice

In this guide, we are covering the facts that you need to know in order to prepare your business to tick off the necessary boxes required to meet CMMC compliance. CMMC (also known as the Cybersecurity Maturity Model Certification) is a recently introduced compliance standard that suppliers and contractors to the Department of Defence (DoD) need to meet in order to be eligible to bid on contracts. There are various levels of CMMC compliance that company’s need to meet based on the level of sensitive data that they handle.

A few examples of level 1 CMMC requirements include: Limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems).

A few examples of level 3 CMMC requirements include: Employ cryptographic mechanisms to protect the confidentiality of remote access sessions.