Search the CMMC FAQs Search Timing 3 How do I get help now? In what solicitations will DoD be including CMMC requirements for FY 2021? When will the CMMC Model and CMMC Assessment Guides be updated? Applicability 4 What is Commercially Available Off the Shelf (COTS)? Can you have COTS services? How does CMMC handle COTS items? Will DFARS 252.204-7012 apply to an organization certified at CMMC Maturity Level 1 (i.e., which does not handle CUI)? Costs 4 How much is the CMMC Accreditation Body (“CMMC-AB”) charging to conduct an assessment? How much will a Maturity Level X assessment cost? How much does it cost to implement an environment that can be certified at Maturity Level X? How much does it cost to prepare for a Maturity Level X assessment? Maturity Levels 6 What Maturity Level Certification will we need? Why does everyone focus on Maturity Level 3? Is a Maturity Level 1 Certification easy to obtain? You keep talking about Maturity Levels 1 and 3; what happened to 2? My organization passed an internal self-assessment under NIST SP 800-171, so we should be ready for our CMMC Maturity Level 3 assessment, right? What CUI will need protection above ML3? CUI and FCI 5 How do we know if our organization handles CUI? If Information isn’t marked, does that mean it isn’t CUI? Will DFARS 252.204-7012 apply to an organization certified at CMMC Maturity Level 1 (i.e., which does not handle CUI)? Is my organization's information CUI? When are Social Security Numbers CUI? Training 3 How many Certified Assessors are there? What is the difference between a Provisional Assessor and a Certified Assessor? When will the Registered Practitioner training be updated? Vendor Tools 0 Microsoft 2 Ecosystem 1 Where can I find a copy of the CMMC-AB Statement of Work with DoD? Popular Articles Why does everyone focus on Maturity Level 3? What Maturity Level Certification will we need? Is a Maturity Level 1 Certification easy to obtain? My organization passed an internal self-assessment under NIST SP 800-171, so we should be ready for our CMMC Maturity Level 3 assessment, right? You keep talking about Maturity Levels 1 and 3; what happened to 2? Newest Articles When are Social Security Numbers CUI? Is my organization's information CUI? Where can I find a copy of the CMMC-AB Statement of Work with DoD? What are the differences between Microsoft's commercial, GCC, GCC High, and DoD clouds? Don't I need a government contract before I can be approved for Microsoft's GCC environment? Recently Updated Articles Is my organization's information CUI? When are Social Security Numbers CUI? Where can I find a copy of the CMMC-AB Statement of Work with DoD? What are the differences between Microsoft's commercial, GCC, GCC High, and DoD clouds? Don't I need a government contract before I can be approved for Microsoft's GCC environment?
