CMMC Services

What You Should Know About CMMC

To standardize and enhance cybersecurity measures with their contractors, the United States DoD rolled out the Cybersecurity Maturity Model Certification, which includes three levels of security requirements to protect government information they share with contractors.

CMMC will apply to DoD contractors handling federal contract information and controlled unclassified information as part of a phased rollout. The General Services Administration (GSA) has specified CMMC in several multi-billion dollar solicitations, requesting organizations’ intent to become certified.

Different Types of Information CMMC Protects

CMMC was developed to protect sensitive information provided by the government to complete a work contract through a third party contractor. Types of information fall into two categories:

Federal Contract Information (FCI): Information provided by the government through a contract that is not intended for public release but necessary to complete the product or service.
Controlled Unclassified Information (CUI): Information, including laws, that needs safeguarding or is not intended for public release, but does not include classified information.

Higher levels of CMMC requirements implement systems to protect against advanced persistent threats (APT). An ATP is an attack where an entity hacks into a computer network without being detected for a long period of time, giving the hackers prolonged, unauthorized access to the computer network.

What is CMMC?

What You Should Know About CMMC

Different Types of Information CMMC Protects

Prescott: Experts in CMMC

Give your business the Green Light

Quick Links

CMMC-AB Listing

Contact Us