Day: Thu 18 Mar 2021

Cybersecurity Maturity Model Certification (#CMMC): reference material

While the main reference documents for CMMC (Cybersecurity Maturity Model Certification) are published by the US OSD (Office of the Under Secretary of Defense) there are some more interesting documents you should reference when diving into CMMC….

This page is a providing a quick overview of useful stuff, when diving into CMMC.

(more information added when interesting links are found. Feel free to notify me if you think information is missing or out of date).

Start page

Source: https://www.acq.osd.mil/cmmc/

On the landing page you’ll find a link to CMMC Model and Assessment Guides : https://www.acq.osd.mil/cmmc/draft.html

Documents

Current version 1.02 (published 10 dec 2020)

CMMC model and assesment guides: https://www.acq.osd.mil/cmmc/draft.html

Model

CMMC Model v1.02:CMMC Model PDF

CMMC Model v1.02 Appendices:CMMC Model Appendices PDF

CMMC Model v1.02 (Appendix A) in tabular format:CMMC Model (Appendix A) Excel

Assesment guides:

CMMC Level 1 Assessment GuideCMMC Level 1 Assessment Guide PDF (Editable)

CMMC Level 3 Assessment GuideCMMC Level 3 Assessment Guide PDF (Editable)

Additional info

Sadly, not all information is not posted on the CMMC home/landing page, but for example this public briefing presentation in PDF format is very useful:

Audit, Certification & Accreditation

Source: https://cmmcab.org/

Publishers:

Introduction on LPP: https://cmmcab.org/lpp/

If you need and ovverview of available publishers, check via CMMC AB marketplace link:

https://cmmcab.org/marketplace/?search_category=headline&q=&search_method=contains&cat=37

Training providers

Introduction to LTP: https://cmmcab.org/ltp-lp/

List of training providers via market place:

https://cmmcab.org/marketplace/?search_category=headline&q=&search_method=contains&cat=37