Introduction To Cybersecurity Maturity Model Certification

For government contractors already established in the cybersecurity field, there are mandatory skillset updates required by May 2023. Training for and satisfying these new requirements for individuals and organizations is the focus of the Emory CMMC Certificate.

In 2019 the Department of Defense (DoD) announced the creation of the Cybersecurity Maturity Model Certification (CMMC) to govern the Defense Industrial Base (DIB). Cybersecurity Maturity Model Certification (CMMC) puts an end to self-assessment and requires a third-party assessor to verify the cybersecurity maturity level.

The CMMC builds from NIST 800-171 but also includes controls from other cybersecurity frameworks. Where CMMC differs is in both the maturity model and the role of third-party assessors.

On November 4, 2021 the Department of Defense unveiled an update to the Cybersecurity Maturity Model Certification framework – CMMC 2.0 – to streamline compliance, increase flexibility, and lower cost for manufacturers and IT providers.

Learning Modues

In 2019 the Department of Defense announced the creation of the Cybersecurity Maturity Model Certification (CMMC) to replace the self-reporting of cyber hygiene that used to govern the Defense Industrial Base (DIB). CMMC puts an end to self-assessment and requires a third-party assessor to verify the cybersecurity maturation level.

The CMMC builds from NIST 800-171 but also includes controls from other cybersecurity frameworks. Where CMMC differs is in both the maturation model and the role of third-party assessors.

The CMMC defines 17 domains of cyber hygiene that are comprised of hundreds of objectives. In fact you need to meet 705 objectives at CMMC Level Three. Many of these objectives, up to 70% do not rely on or require a technical solution.

In this module we will learn and explore the aspects and elements of CMMC and explain its overall importance to different stakeholders by asking:

• What kind of sensitive data does CMMC seek to protect?

• How did CMMC become federal policies?

• What foundational documents and regulations spell out the requirements for CMMC?