Introduction to Cybersecurity Maturity Model Certification (CMMC)

Cybersecurity Maturity Model Certification (CMMC) is a critical step for all organizations collaborating with the Department of Defense and related entities. Learn how the certification process works, why it's critical, and how to approach the process in your organization and with your suppliers.

Cybersecurity Maturity Model Certification (CMMC) is the Department of Defense’s (DoD) newest verification mechanism, designed to ensure that cybersecurity controls and processes adequately protect Controlled Unclassified Information (CUI) that resides on Defense Industrial Base (DIB) systems and networks. DoD will require third-party assessments of DoD contractors' compliance with CMMC/NIST 800-171 practices, procedures, and capabilities via DFARS 252.204-7012. All DoD contractors should immediately learn the CMMC's technical requirements and prepare not only for certification but long-term cybersecurity agility.

The CMMC establishes five certification levels that reflect the maturity and reliability of a company's cybersecurity infrastructure to safeguard sensitive government information on contractors' information systems. Each level requires compliance with the lower-level requirements and institutionalization of additional processes to implement specific cybersecurity practices. All DoD Contractors will need to become CMMC Certified by passing an external CMMC audit, to verify they have met the appropriate level of cybersecurity for their business.

Custom Program Benefits

This 40-hour course provides a comprehensive overview of the CMMC model and the certification process. The model consists of 171 separate practices, 17 domains, and 5 processes. Tools and techniques for complying with the model and approaches for preparing for a certification assessment will be provided.

Your team will learn to:

• Recognize the structure and key elements of the model
• Conduct a self-assessment to determine your readiness for an external audit
• Implement improvement plans to address self-assessment gaps
• Select an external assessor and negotiate the scope of the assessment
• Prepare for a successful audit
• Address compliance issues raised in the audit

Topics:

• Model Structure and Components (Levels, Domains, Processes, Practices)
• Implementation of Model Practices
• Assessment Process (Assessor Selection, Preparation, Execution, Follow-Up)
• Conducting a Self-Assessment
• Preparing for an External Assessment

Who Should Attend

This program is for DoD contractor professionals who seek to understand and help their organizations prepare for CMMC assessments. No pre-requisites required, but familiarity with cybersecurity activities is a plus.

Instructors

Rick Hefner; Dr. Donald Robinson