Maintenance (MA)
Maintenance contains 6 CMMC Level 2 requirements focused on keeping your systems in good working order while maintaining security. These controls ensure that routine upkeep, repairs, and vendor support do…
Learn moreThe CMMC Knowledge Base
CMMC Incident Response (IR)
Incident Response contains 3 CMMC Level 2 requirements focused on preparing for and handling security incidents. These controls ensure you can detect, respond to, and recover from cyberattacks or security…
Learn moreIdentification and Authentication (IA)
CMMC Identification and Authentication (IA) Requirements Identification and Authentication contains 11 CMMC Level 2 requirements focused on verifying who is accessing your systems. These controls ensure that users are who…
Learn moreConfiguration Management (CM)
Configuration Management (CM) Requirements Configuration Management contains 9 CMMC Level 2 requirements focused on how you set up, maintain, and change your systems. These controls ensure your systems stay secure…
Learn moreAudit and Accountability (AU)
CMMC Audit and Accountability (AU) Requirements Audit and Accountability contains 9 CMMC Level 2 requirements focused on logging system activity and maintaining records. These controls ensure you can answer a…
Learn moreAwareness and Training (AT)
Awareness and Training (AT) CMMC Awareness and Training (AT) Requirements Awareness and Training is the smallest control family in CMMC Level 2, containing just 3 requirements. Do not let the…
Learn moreAccess Control (AC)
Access Control (AC) CMMC Access Control (AC) Requirements Access Control is the largest control family in CMMC Level 2, containing 22 of the 110 total requirements. These controls determine who…
Learn moreWhat is the difference between a self-assessment and C3PAO certification?
When pursuing CMMC Level 2 compliance, one of the most important decisions you’ll face is whether your contract requires a self-assessment or C3PAO certification. While both assess the same 110…
Learn moreWhich CMMC level does my contract require?
If you’re a defense contractor or subcontractor, knowing which CMMC level your contract requires is critical for maintaining eligibility to bid on and perform DoD work. Starting November 10, 2025,…
Learn moreWhat security controls does CMMC Level 2 require?
CMMC Level 2 security controls consist of 110 specific requirements from NIST SP 800-171 Revision 2 organized across 14 control families (also called domains). These controls establish comprehensive cybersecurity protections…
Learn more