CMMC / NIST 800-171

What is CMMC?

CMMC is a 5-tier DoD (Department of Defense) cybersecurity standard which requires that all DoD contractors and subcontractors meet a minimum security standard. Which tier a contractor has to adhere to will depend on the sensitivity of the contract and whether and how CUI (Controller Unclassified Information) and/or FCI (Federal Contract Information) data is stored, although most contractors will likely need to adhere to level 3 or higher.