Office: 240-232-7272
Signed in as:
filler@godaddy.com
Cybersecurity Third Party Assessor Oganization (C3PAO)
JAISON Solutions, LLC is a provisional third party Assessor Organization (C3PAO) nominated by the CMMC Accrediting Board (CMMC-AB).
What is the Cybersecurity Maturity Model Certification (CMMC)?
The Cybersecurity Maturity Model Certification (CMMC) is the latest verification method put in place by the Department of Defense (DoD). The goal of the CMMC is to implement an appropriate level of cybersecurity readiness across the supply chain of the defense industrial base (DIB). The DIB supply chain includes more than 300,000 companies, all of which are responsible for protecting unclassified information (CUI) under the CMMC.
DoD is committed to developing and requiring a consolidated Cybersecurity standard to identify required security practices and controls throughout the DoD Acquisition process.
CMMC will define 5 levels of cybersecurity readiness, which all US DoD contracts will invoke on the DIB supply chain. It is estimated that over 300,000 DIB contractors will be affected throughout the 3 to 5 year roll-out, with most requiring a Level 1 through Level 3 certification.
Additional Information
The various levels of CMMC include increasing levels of practices focused on the handling of Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). These levels are based on the sensitivity of the information to be protected and the associated range of threats that may be encountered. The processes and practices come from various existing cybersecurity standards and frameworks including ISO 27001, NIST 800-171, and others.
- Level 1 – Basic Cyber Hygiene (Performed) – 17 practices
- Level 2 – Intermediate Cyber Hygiene (Documented) – 72 practices
- Level 3 – Good Cyber Hygiene (Managed) – 130 practices
- Level 4 – Proactive Cyber Hygiene (Reviewed & Improved) – 156 practices
- Level 5 – Advanced Cyber Hygiene (Optimized) – 171 practices
As with other cybersecurity standards, CMMC is organized in to domains:
Access ControlAsset ManagementAudit & AccountabilityAwareness & TrainingConfiguration ManagementIdentification & AuthenticationIncident ResponseMaintenanceMedia ProtectionPersonnel SecurityPhysical ProtectionRecoveryRisk ManagementSecurity AssessmentSituational AwarenessSystem & Communications ProtectionSystem & Information Integrity
Why your Company need the CMMC Standard:
- Compete for DoD Contracts
- Respond to Cyber threats
- Protection of data against adversaries or Cyber Criminals
- Competitive Advantage
- Protection of Reputation