The CMMC Knowledge Base

Where to start with CMMC?

CMMC…where do you start? If you’re a defense contractor facing CMMC requirements for the first time, the question “where do I start?” is completely natural. The Cybersecurity Maturity Model Certification…

Learn more
CMMC Implementation Timeline

CMMC Implementation Timeline Every defense contractor preparing for CMMC certification needs a clear implementation timeline. Without one, compliance efforts stall, deadlines get missed, and costs spiral out of control. This…

Learn more
How Long Does CMMC Compliance Take?

CMMC Compliance Timeline If you’re a defense contractor asking “how long does CMMC compliance take?” — you’re not alone. It’s one of the most common questions we hear from companies…

Learn more
Security Assessment (CA)

Security Assessment (CA) is one of 14 security control families in NIST SP 800-171 Revision 2 that forms the foundation for CMMC Level 2 certification. The CA family contains 4…

Learn more
Risk Assessment (RA)

Risk Assessment (RA) is one of 14 security control families in NIST SP 800-171 Revision 2 that forms the foundation for CMMC Level 2 certification. The RA family contains 3…

Learn more
Physical Protection (PE)

Physical Protection (PE) is one of 14 security control families in NIST SP 800-171 Revision 2 that forms the foundation for CMMC Level 2 certification. The PE family contains 6…

Learn more
Personnel Security (PS)

CMMC Personnel Security (PS) Requirements Personnel Security contains only 2 CMMC Level 2 requirements, but these controls address one of the most critical security factors: people. These controls ensure that…

Learn more
Media Protection (MP)

CMMC Media Protection (MP) Requirements Media Protection contains 9 CMMC Level 2 requirements focused on protecting Controlled Unclassified Information stored on various types of media. These controls cover everything from…

Learn more