CMMC: Cybersecurity Maturity Model Certification in Cybersecurity
CMMC stands for Cybersecurity Maturity Model Certification. CMMC is the Department of Defense certification program that requires defense contractors to demonstrate cybersecurity maturity at one of three levels. It builds on NIST SP 800-171 and adds third-party assessment requirements.
How CMMC Is Used in Cybersecurity
GRC analysts lead CMMC readiness projects by mapping existing controls to CMMC practices and identifying gaps. Security engineers implement technical controls like multifactor authentication, encryption, and endpoint detection to meet Level 2 and Level 3 requirements. Defense Industrial Base companies must achieve CMMC certification to bid on DoD contracts.
Read the full glossary entry: CMMC in Cybersecurity
Cybersecurity Roles That Work with CMMC
Related Cybersecurity Acronyms
Frequently asked questions
What does CMMC stand for?
CMMC stands for Cybersecurity Maturity Model Certification. CMMC is the Department of Defense certification program that requires defense contractors to demonstrate cybersecurity maturity at one of three levels. It builds on NIST SP 800-171 and adds third-party assessment requirements.
What is CMMC used for in cybersecurity?
GRC analysts lead CMMC readiness projects by mapping existing controls to CMMC practices and identifying gaps. Security engineers implement technical controls like multifactor authentication, encryption, and endpoint detection to meet Level 2 and Level 3 requirements. Defense Industrial Base companies must achieve CMMC certification to bid on DoD contracts.
Sources
Definitions are original explanations written for career development purposes. For authoritative technical definitions, refer to NIST, ISO, or the relevant standards body.