CMMC Levels & Requirements Archives

CMMC Levels & Requirements

What is the difference between a self-assessment and C3PAO certification?

When pursuing CMMC Level 2 compliance, one of the most important decisions you’ll face is whether your contract requires a self-assessment or C3PAO certification. While both assess the same 110…

Learn more

Which CMMC level does my contract require?

If you’re a defense contractor or subcontractor, knowing which CMMC level your contract requires is critical for maintaining eligibility to bid on and perform DoD work. Starting November 10, 2025,…

Learn more

What security controls does CMMC Level 2 require?

CMMC Level 2 security controls consist of 110 specific requirements from NIST SP 800-171 Revision 2 organized across 14 control families (also called domains). These controls establish comprehensive cybersecurity protections…

Learn more

What is CMMC Level 2?

CMMC Level 2 is the intermediate cybersecurity level requiring defense contractors to implement 110 security controls from NIST SP 800-171 Revision 2 to protect Controlled Unclassified Information (CUI). Unlike Level…

Learn more

What is CMMC Level 1?

CMMC Level 1 is the foundational cybersecurity level requiring defense contractors to implement 15 basic safeguarding practices to protect Federal Contract Information (FCI). Unlike higher CMMC levels, Level 1 allows…

Learn more

When is CMMC Certification Required?

CMMC (Cybersecurity Maturity Model Certification) certification is required when you have a Department of Defense (DoD) contract that requires you to process, store, or transmit certain types of government information…

Learn more

CMMC Levels & Requirements

Questions? Let's Talk!

Company

Solutions

Resources