The 14 Control Families

Security Assessment (CA)

Security Assessment (CA) is one of 14 security control families in NIST SP 800-171 Revision 2 that forms the foundation for CMMC Level 2 certification. The CA family contains 4…

Learn more
Risk Assessment (RA)

Risk Assessment (RA) is one of 14 security control families in NIST SP 800-171 Revision 2 that forms the foundation for CMMC Level 2 certification. The RA family contains 3…

Learn more
Physical Protection (PE)

Physical Protection (PE) is one of 14 security control families in NIST SP 800-171 Revision 2 that forms the foundation for CMMC Level 2 certification. The PE family contains 6…

Learn more
Personnel Security (PS)

CMMC Personnel Security (PS) Requirements Personnel Security contains only 2 CMMC Level 2 requirements, but these controls address one of the most critical security factors: people. These controls ensure that…

Learn more
Media Protection (MP)

CMMC Media Protection (MP) Requirements Media Protection contains 9 CMMC Level 2 requirements focused on protecting Controlled Unclassified Information stored on various types of media. These controls cover everything from…

Learn more
Maintenance (MA)

Maintenance contains 6 CMMC Level 2 requirements focused on keeping your systems in good working order while maintaining security. These controls ensure that routine upkeep, repairs, and vendor support do…

Learn more
CMMC Incident Response (IR)

Incident Response contains 3 CMMC Level 2 requirements focused on preparing for and handling security incidents. These controls ensure you can detect, respond to, and recover from cyberattacks or security…

Learn more
Identification and Authentication (IA)

CMMC Identification and Authentication (IA) Requirements Identification and Authentication contains 11 CMMC Level 2 requirements focused on verifying who is accessing your systems. These controls ensure that users are who…

Learn more