General CMMC

Question 1

The purpose of the Cybersecurity Maturity Model Certification (CMMC)

Answer 1

The purpose of the Cybersecurity MaturityModel Certification (CMMC) is to serve as a verification mechanism to ensure that companies in the DoD supply chain implement appropriate cybersecurity practices and processes to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) within their unclassified networks.

Question 2

The responsibility to create, manage, and improve the CMMC lies between two main entities:

Answer 2

The DoD and the CMMC Accreditation Body (CMMC-AB).