controls/frameworks/cmmc.json
|
{"frameworkId":"cmmc","label":"CMMC 2.0","version":"2.0","description":"Cybersecurity Maturity Model Certification \u2014 DoD framework protecting Controlled Unclassified Information (CUI) across the Defense Industrial Base supply chain. Three maturity levels: L1, L2, L3.","homepageUrl":"https://dodcio.defense.gov/CMMC/","css":"fw-cmmc","totalControls":110,"registryKey":"cmmc","csvColumn":"Cmmc","displayOrder":7,"scoring":{"method":"maturity-level","maturityLevels":{"L1":{"label":"Level 1 \u2014 Foundational","description":"Basic safeguarding of Federal Contract Information (FCI)","practiceCount":17},"L2":{"label":"Level 2 \u2014 Advanced","description":"Protection of Controlled Unclassified Information (CUI), aligned with NIST SP 800-171 Rev 2","practiceCount":110},"L3":{"label":"Level 3 \u2014 Expert","description":"Enhanced protection against Advanced Persistent Threats (APTs), adds NIST SP 800-172 requirements","practiceCount":134}}},"colors":{"light":{"background":"#f0fdfa","color":"#134e4a"},"dark":{"background":"#134E4A","color":"#5EEAD4"}}} |