CMMC Information Resources

Below is a list of Helpful Info, Relevant Topic Articles, and links to Official DoD Documents

Helpful Acronyms

• C3PAO: Certified Third-Party Assessment Organization
• CAICO: CMMC Assessors and Instructors Certification Organization
• CMMC: Cybersecurity Maturity Model Certification
• CUI: Controlled Unclassified Information
• DFARS: Defense Federal Regulation Supplement
• DIB: Defense Industry Base
• DoD: Department of Defense
• FCI: Federal Contract Information
• NIST SP 800-171: National Institute of Standards and Technology Special Publication 800-171
• OUSD (A&S): Office of the Under Secretary of Defense for Acquisition and Sustainment
• RPO: Registered Provider Organization

Helpful Links

• OUSD Main Website
• CMMC Model
• CMMC Level 1 Assessment Guide
• CMMC Level 3 Assessment Guide
• CMMC Glossary
• CMMC Registered Provider Organizations
• CUI Categories
• DFARS Interim Rule
• NIST SP 800-171 Self-Assessment Handbook
• NIST SP 800-171 Basic Assessment and Scoring Template
• Microsoft Cloud Platform Compatibility with CMMC