CMMC
Cybersecurity Maturity Model Certification
CMMC is the Department of Defense certification program that requires defense contractors to demonstrate cybersecurity maturity at one of three levels. It builds on NIST SP 800-171 and adds third-party assessment requirements.
Cómo se usa en ciberseguridad
GRC analysts lead CMMC readiness projects by mapping existing controls to CMMC practices and identifying gaps. Security engineers implement technical controls like multifactor authentication, encryption, and endpoint detection to meet Level 2 and Level 3 requirements. Defense Industrial Base companies must achieve CMMC certification to bid on DoD contracts.
Término relacionado en el glosario: cmmc
Las definiciones son explicaciones originales escritas con fines de desarrollo profesional. Para definiciones técnicas autorizadas, consulta NIST, ISO o el organismo de normalización correspondiente.