The Pocket Guide to CMMC
CMMC requirements apply to defense contractors and subcontractors handling FCI or CUI today, regardless of where the phased rollout stands. This guide covers which information triggers which level, what a self-assessment involves, how primes verify their supply chain, and what compliance actually costs and how long it takes.
What's in this guide:
- The basics of the CMMC program as it stands today
- Why CMMC matters beyond contract-eligibility
- Which information triggers CMMC and at what level
- The cybersecurity and assessment requirements of each level
- How requirements flow down from primes
- What CMMC actually costs and how long it takes
- How automation can help get your organization secure faster and stay compliant