Cybersecurity Maturity Model Certification (CMMC)
DoD's tiered cybersecurity certification for contractors.
Definition
CMMC verifies that defense contractors implement required cybersecurity practices, with levels scaled to the sensitivity of the information handled. Higher levels require third-party or government assessment.
Why it matters
CMMC level is a pass/fail gate on many DoD solicitations, and readiness takes months — it cannot be solved during a proposal.
Example
A solicitation handling CUI requires CMMC Level 2 certification at time of award.
Related terms
- NIST SP 800-171The security control set for protecting CUI in nonfederal systems.
- Defense Federal Acquisition Regulation SupplementDoD's supplement to the FAR, including cybersecurity requirements.
- Controlled Unclassified InformationSensitive but unclassified government information requiring safeguards.
Stop translating solicitations by hand
RFP Scribe reads the solicitation, builds the compliance matrix, and drafts a response from your Company Brain in minutes.
Start freeServices that help with this
Buy just the piece you need — most start at a few dollars, no subscription required.
RFP Plain-English Summary
$3Translate jargon-heavy solicitations into clear, actionable language.
Buy NowGovCon Masterclass — Basics
$99Video courses on capture, proposals, and pricing strategy.
Enroll NowCompliance & Readability Scan
$2Verify your proposal addresses every stated requirement.
Buy Now