Understanding CMMC 2.0 requirements is essential for organizations working with the US Department of War and the Defense Industrial Base (DIB). The Cybersecurity Maturity Model Certification (CMMC) framework establishes security requirements for protecting Federal Contract Information (FCI) and Controlled Unclassified Information (CUI).
This infographic provides a quick comparison of CMMC Levels 1, 2 and 3, highlighting their security requirements, applicable frameworks, assessment approaches, and key considerations for Chief Information Security Officers (CISOs).
Level 1 (Foundational) focuses on 15 basic safeguarding requirements for FCI. Level 2 (Advanced) addresses 110 security requirements from NIST SP 800-171 Revision 2 for protecting CUI. Level 3 (Expert) builds on Level 2 with 24 selected requirements from NIST SP 800-172 to strengthen protection against advanced persistent threats.
The visual guide also outlines five priorities for CISO readiness: information scope, contract requirements, system boundaries, evidence readiness, and leadership accountability.
This infographic offers a practical starting point for understanding CMMC compliance and planning your next steps.
Enjoyed reading this infographics? Stay updated with our latest exclusive content by following us on Twitter and LinkedIn.
