CMMC Model v2.0 (Cybersecurity Maturity Model Certification)

Name: CMMC Model v2.0 (Cybersecurity Maturity Model Certification)
Rating: 4.3 (1138 reviews)

This program is designed to provide you with essential insights into comprehending the CMMC v2.0

Created byJosh Hicks

Last updated 8/2024

English

English [Auto],French [Auto],

What you'll learn

Fundamentals of CMMC
Structure of the CMMC Model
CMMC Controls
CMMC Certification Process
CMMC Assessment Process
Key U.S. Government Regulations
Defense Federal Acquisition Regulations
NIST Special Publication 800-171 series

Course content

4 sections • 13 lectures • 47m total length

Introduction2:05
Gain an overview of the CMMC model v2.0, including the regulations, certification process, and the DoD mandates that protect controlled information, with references to the NIST risk management framework.

Intro to CMMC5:07
Relevance and Context2:14
Explore CMMC v2.0 background, highlighting DoD contractors must obtain third-party certification of safeguarding covered defense information and cyber incident reporting, aligned with DFARS 252.204-7012 and 800 171 controls, to bid.
Information Types2:44
Explore the two key information types protected by the CMMC v2.0: federal contract information and controlled unclassified information (CUI or QE), defined under 48 CFR and Executive Order 13556.
CUI Regulations3:00
Review 32 CFR 2002 and the National Archives CUI categories to understand CUI and the QE program, including marking and protection under subparts A–C for CMMC compliance.
Other Standards3:27
Explore how NIST SP 800-171 and 800-172 align with CMK standards, detailing security controls, assessment guidance, and mappings to 853, ISO/IEC 27001, CIS controls, HIPAA, and PCI.
Section 2 Quiz

CMMC Model3:41
Learn the CMMC model v2.0 implementation across three levels—17, 110, and 145 controls—covering 14 domains and the roles of cyber AB registered practitioners and certified third-party assessment organizations.
CMMC Controls6:16
Explore how CMMC controls drawn from NIST catalogs are implemented across levels one to three, guided by 801-71 and 801-72, with 14 control families and DFARS clauses.
Ecosystem3:12
Discover the cmmc ecosystem, where the cyber ab and DoD origin shape assessment and certification, and third-party assessor organizations, registered provider organizations, and licensed partner publishers enable compliance.
Additional Resources2:03
Explore official DoD and cyber lab resources to understand CMMC policy, training, and how to achieve certification, including assessors, practitioners, instructors, and service providers.
Section 3 Quiz

Certification Process5:08
Explore the CMMC version 2.0 certification process, including assessment, documentation and evidence, and a plan of action and milestones toward government contracts.
Assessment Process4:47
Explore the CMMC v2.0 assessment process, from level 1 self-assessment to level 3 government-led reviews, with scoping, segmentation, and access controls to protect FCI and QE.
Documentation and Evidence3:43
Prepare and maintain documentation and evidence for a cmmc assessment, including policies, system security plans, infrastructure diagrams, and logs to demonstrate nist controls.
Section 4 Quiz

Requirements

U.S. Government Cybersecurity Requirements
NIST Risk Management Framework

Description

In recent years, there have been numerous detrimental breaches of both classified and unclassified government data, leading to the unauthorized exposure of sensitive information. To safeguard this data, the Federal government has implemented measures, enforcing legal and contractual obligations on defense contractors through the Cybersecurity Maturity Model Certification (CMMC). This course is specifically crafted for security professionals seeking an introductory understanding of the recently imposed CMMC requirements by the U.S. Government on its supply and service providers.

Within the Cybersecurity Maturity Model Certification (CMMC) course, you will dive into the fundamentals of CMMC, exploring its origins and significance. Initially, you'll examine key U.S. Government regulations, such as the Defense Federal Acquisition Regulations, that necessitate the application of CMMC to Department of Defense contractors. Subsequently, you'll explore the NIST Special Publication 800-171 series. The course then provides insight into the structure of the CMMC model, encompassing its levels, controls, and practices. Lastly, you'll gain a comprehensive understanding of the challenges and processes involved in achieving all three levels of the CMMC Maturity Model.

Upon completing this course, you will have a comprehensive understanding of how the CMMC relates to various scenarios encountered by defense contractors, enriching your expertise in this critical area.

Who this course is for:

Government contractors and anyone who wants to learn about CMMC v2.0
Security Professionals

CMMC Model v2.0 (Cybersecurity Maturity Model Certification)

What you'll learn

Explore related topics

Course content

Course Overview1 lecture • 2min

Cybersecurity Maturity Model Certification5 lectures • 17min

CMMC Implementation4 lectures • 15min

Achieving the Certification3 lectures • 14min

Requirements

Description

Who this course is for: