With many organizations preparing for the soon to be enforced Cybersecurity Maturity Model Certification (CMMC) requirements, now is the time to be working with the experts. It is anticipated that CMMC will be phased into DoD RFPs by early 2021. Prime and sub-contractors doing business with the DoD will be required to achieve a specific CMMC level certification as a prerequisite to new contract awards.

The CMMC is a unified security standard and a certification process developed by the U.S. Department of Defense (DoD) to protect the security of Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) within the Defense Industrial Base (DIB). Consisting of five maturity levels of security practices ranging from Basic to Advanced, CMMC will be phased into DoD RFPs by early 2021. C3PAOs are the only businesses authorized to conduct CMMC assessments.