Find out exactly where you stand — free 5-minute readiness check for small DoD contractors.
Takes 2 minutes. We'll match you with certified CMMC specialists who fit your size and budget.
The Cybersecurity Maturity Model Certification (CMMC) is a Department of Defense requirement that applies to any company in the defense supply chain that handles Controlled Unclassified Information (CUI) — including subcontractors and suppliers.
There are three certification levels, depending on the sensitivity of the information you handle and your contract requirements:
17 basic cybersecurity practices. Annual self-assessment. Most small contractors handling only FCI (Federal Contract Information) fall here.
110 practices aligned with NIST SP 800-171. Third-party assessment required for most contracts involving CUI. Affects the majority of DoD contractors.
130+ practices. Government-led assessment. Required only for contractors supporting the most critical defense programs.
Not sure which level applies to you? Fill out the form above — we'll help you figure it out and connect you with a specialist who works with businesses your size.