CMMC 2.0 refers to the second version of the Cybersecurity Maturity Model Certification (CMMC) framework. The CMMC is a cybersecurity standard created by the US Department of Defense (DoD) to protect sensitive information that is shared by contractors and subcontractors in the defense supply chain. The CMMC 2.0 update includes enhancements and changes to the original framework, which was released in 2020.
Some of the changes introduced in CMMC 2.0 include:
-
Simplified model: CMMC 2.0 has a simplified model with fewer practices and processes, making it easier for organizations to implement.
-
More stringent requirements: The new version of CMMC has more stringent requirements for higher levels of certification, including Level 5, which is the most comprehensive level.
-
Updated terminology: CMMC 2.0 introduces new terminology and reorganizes the framework to align with other cybersecurity standards and best practices.
-
Emphasis on supply chain security: The new version of CMMC places greater emphasis on supply chain security, and includes new requirements for organizations to assess and manage their supply chain risks.
Overall, CMMC 2.0 is designed to help organizations in the defense supply chain improve their cybersecurity posture and protect sensitive information from cyber threats.
