What is CMMC 2.0?

The Cybersecurity Maturity Model Certification (CMMC) 2.0 is a U.S. Department of War (DoW) program that sets cybersecurity requirements for contractors and subcontractors handling sensitive federal information within the defense supply chain.

How does CMMC 2.0 work?

CMMC 2.0 sets cybersecurity requirements based on the type and sensitivity of information an organization handles, with requirements based on NIST SP 800-171 cybersecurity standards. It has multiple levels, ranging from basic protection of Federal Contract Information (FCI) to more advanced safeguards for Controlled Classified Information (CUI). Depending on the level and contract, organizations may need a self-assessment, third-party assessment, or government assessment.

Why is CMMC 2.0 important?

For organizations that do business with the DoW, CMMC requirements can determine eligibility for certain contracts. It also provides a consistent framework for protecting sensitive government information and reducing cybersecurity risk across the defense supply chain.

Benefits and use cases

• Strengthened cybersecurity posture
• Eligibility for defense contracts
• Standardized controls and processes
• Improved audit readiness

Does NexusTek help with CMMC 2.0?

Yes. NexusTek offers CMMC 2.0 Readiness services to help organizations accelerate compliance with CMMC 2.0 and NIST SP 800-171, aligning people, processes, and technology to requirements.