Cybersecurity risks threaten the Defense Industrial Base (DIB) supply chain along with the national security of the U.S. government and has led to the development of the CMMC assessment framework to avoid or significantly reduce future losses due to cyber breaches.
The CMMC framework is used to certify the cyber readiness of contractors doing business with the Department of Defense (DoD). A CMMC assessment must be conducted by an Authorized CMMC Third-Party Assessment Organization (C3PAO) in order to meet the DoD’s requirement.
Level 1 Assessment – Basic Cyber Hygiene (17 practices). Applies to contractors who store, process, and transmit Federal Contract Information (FCI).
Level 2 Assessment – Intermediate Cyber Hygiene (110 practices). Applies to contractors who store, process, and transmit FCI, and Controlled Unclassified Information (CUI). The majority of the DIB and research institutions will need to comply with this Level.
Level 3 Assessment – Yet to be defined. Based off of NIST 171 and 172.
JSVAP Assessment – Until the CMMC rulemaking process is final (expected early 2024), Organizations Seeking Certification (OSCs) can volunteer to participate in the Joint Surveillance Voluntary Assessment Program (JSVAP). The JSVAP is conducted by a C3PAO and the Defense Contract Management Agency (DCMA) Defense Industrial Base Cybersecurity Assessment Center (DIBCAC). The assessment evaluates the OSC’s NIST 800-171 practices, and successful organizations receive a DIBCAC High certificate that will later be replaced by a CMMC Certificate when the rule is in place.
Early CMMC Experience
History in Cyber and Defense
Not ready for the CMMC certification assessment?
We can help you prepare:
Peace of Mind
Win Federal Contracts
Gain the advantage to securing federal contracts knowing that your requisite cyber hygiene meets the standards of the CMMC initiative.
Obtain a DIBCAC high certificate until the CMMC final rule is in place, validating your organization has done its duty to protect the nation’s supply chain.
Get started with Redspin Today
Be Ready. Be Resilient. Validate.