REAL COMPLIANCE.
PROVEN OUTCOMES.

For all contractors that have Federal Contract Information (FCI). 17 basic safeguarding practices aligned with NIST SP 800-171. Requires annual self-attestation.

For most contractors that store, process, or transmit CUI. 110 practices aligned with NIST SP 800-171. Requires an CMMC Level 2 assessment from an authorized or accredited CMMC Third-Party Assessment Organization (C3PAO).

For the highest-priority Defense programs for contractors that store, process, or transmit CUI. 130 practices aligned with NIST SP 800-171 and NIST SP 800-172. Requires a third-party assessment from a CMMC third party Assessment Organization (C3PAO) to be followed by a government-led (DIBCAC) CMMC Level 3 assessment.