The 14 Control Families

Configuration Management (CM)

Configuration Management (CM) Requirements Configuration Management contains 9 CMMC Level 2 requirements focused on how you set up, maintain, and change your systems. These controls ensure your systems stay secure…

Learn more
Audit and Accountability (AU)

CMMC Audit and Accountability (AU) Requirements Audit and Accountability contains 9 CMMC Level 2 requirements focused on logging system activity and maintaining records. These controls ensure you can answer a…

Learn more
Awareness and Training (AT)

Awareness and Training (AT) CMMC Awareness and Training (AT) Requirements Awareness and Training is the smallest control family in CMMC Level 2, containing just 3 requirements. Do not let the…

Learn more
Access Control (AC)

CMMC Access Control (AC) Requirements Access Control is the largest control family in CMMC Level 2, containing 22 of the 110 total requirements. These controls determine who can access your…

Learn more