CMMC FAQ
Search the CMMC FAQs
- What Maturity Level Certification will we need?
- Why does everyone focus on Maturity Level 3?
- Is a Maturity Level 1 Certification easy to obtain?
- You keep talking about Maturity Levels 1 and 3; what happened to 2?
- My organization passed an internal self-assessment under NIST SP 800-171, so we should be ready for our CMMC Maturity Level 3 assessment, right?
- What CUI will need protection above ML3?
- How do we know if our organization handles CUI?
- If Information isn’t marked, does that mean it isn’t CUI?
- Will DFARS 252.204-7012 apply to an organization certified at CMMC Maturity Level 1 (i.e., which does not handle CUI)?
- Is my organization's information CUI?
- When are Social Security Numbers CUI?