What Cybersecurity Maturity Model Certification (CMMC) 2.0 - Three-Level Framework for Defense Contractors Handling Controlled Unclassified Information (CUI) and Federal Contract Information (FCI) requires
The CMMC 2.0 framework mandates that all organizations within the Defense Industrial Base (DIB) implement cybersecurity practices aligned with one of three certification levels (1, 2, or 3) based on the type of information handled; specifically Federal Contract Information (FCI) or Controlled Unclassified Information (CUI); as established by the CMMC Program rule at 32 CFR Part 170 and the corresponding DFARS clauses. Compliance is required for all Department of Defense (DoD) contractors and subcontractors to bid on or perform work under DoD contracts involving CUI or FCI.
Pillar: Public Sector & Government Procurement · Authority: U.S. Department of Defense, Office of the Under Secretary of Defense for Acquisition and Sustainment · Version: 1.1.0 · Last updated:
Primary source: https://dodcio.defense.gov/CMMC/
SHA-256 integrity: eccb9d3119edf78617e9c413e1917357a3aacb31e94e18a8ffc61d53ba3d74b8
Primary Citations — 5 traced to source
- 32 CFR Part 170 - Cybersecurity Maturity Model Certification (CMMC) Program, https://www.ecfr.gov/current/title-32/subtitle-A/chapter-I/subchapter-G/part-170
- 32 CFR Part 170 - Applicability of CMMC requirements to defense contractors and subcontractors handling FCI or CUI
+ 3 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/us-cmmc-2-0-defense-industrial-base-2021.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/us-cmmc-2-0-defense-industrial-base-2021.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/us-cmmc-2-0-defense-industrial-base-2021
- Back to registry: Browse all 10,090 compliance nodes