Task 1: Identify and compare roles/responsibilities/requirements of authorities across the CMMC Ecosystem.

Question 1

1.1.1 Authorities

Answer 1

To achieve the goals of CMMC, a complete ecosystem of organizations and individuals is required. The primary authorities for the program are the Department of Defense, specifically, the **Office of the Undersecretary of Defense (OUSD) Acquisition & Sustainment (A&S) **and the CMMC Accreditation Body (CMMC-AB). The CMMC-AB has been chartered to develop and run the ecosystemsupporting CMMC . Let’s take a look at their specificroles.

Question 2

1.1.2 Office of the Undersecretary of Defense (OUSD) Acquisition and Sustainment (A&S)

Answer 2

Per the OUSD (A&S) website, “Cybersecurity is a top priority for the Department of Defense. The Defense Industrial Base (DIB) is the target of increasinglyfrequent and complex cyberattacks. To protect American ingenuity and national security information, the DoD developed CMMC 2.0 to dynamically enhance DIB cybersecurity to meet evolvingthreats and safeguard the information that supports and enables ourwarfighters.”2

Question 3

The original concept for basic cyber hygiene across Federal suppliers is contained in

Answer 3

the FAR Clause 52.204-21, with fifteen basic cyber security control safeguards required to be implemented by the contractor as part of the contract award.