Michael Meline , CEO of Idaho-based Cyber Self-Defense and one of the country ’ s first 100 CMMC Provisional Assessors and Registered Practitioners , is wellversed in CMMC and the primary difference between the existing DFARS requirements and the new framework .
APPRENTICESHIP ROI FOR EMPLOYERS WWW . AJACTRAINING . ORG
“ CMMC is a Maturity Model . Companies can ’ t expect to just check a box with this . Assessors will want organizations to prove that their cybersecurity plan is an integral part of their business . If a company is waiting for an official deadline to start putting systems in place , chances are they ’ ll fail because they won ’ t have the time they need .”
The first version of the CMMC was released in January of 2020 , outlining five levels of certification that address every business in the DIB from the largest primes to the smallest subcontractors . The tiered structure ranges from Level 1 “ Basic Cybersecurity Hygiene ” to Level 5 “ Advanced .” Each level has its own requirements and expectations and builds off of the previous level . The required level of certification for a contractor is aligned with the type and sensitivity of information to be protected and the range of potential threats within a given contract .
Level 1 provides basic cybersecurity safeguards for anyone doing business with the DoD , but those working with CUI will need to implement the “ Moderate ” safeguards outlined in Level 3 at a minimum . Most DoD contractors can expect to be required to achieve Level 3 certification .
BUILDING THE FUTURE
75 Years of Ingenuity , Quality , and a Commitment to Excellence
www . machinistsinc . com ( 800 ) 244-4130
Parts - Assemblies - Tooling - Prototyping
OCTOBER | NOVEMBER 2021 ISSUE NO . 23 35