CMMC builds upon DFARS 7012 by verifying an organization’s readiness to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) such as International Traffic in Arms Regulation (ITAR) and Export Administration Regulations (EAR) export-controlled data.ĬMMC extends beyond the parent organization into sub-contractors, partners, and suppliers. DoD has mandated CMMC with periodic assessments in order to strengthen cybersecurity across the DIB. DFARS requires organizations supporting the Department of Defense (DoD) to implement NIST SP 800-171 and FedRAMP Moderate Impact level controls. The Defense Industrial Base (DIB) is charged with implementing Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012. What is Cybersecurity Maturity Model Certification (CMMC)? System & Information Integrity Maturity (5/28).System & Communications Protection Maturity – live.Security Assessment & Situational Awareness Maturity – live.Recovery & Risk Management Maturity – live.Maintenance & Media Protection Maturity – live.Identification & Authentication Maturity – this blog.Asset & Configuration Management Maturity – live.Stay tuned for the published and upcoming CMMC blogs in the series: Microsoft is closely tracking developments related to the CMMC. As a result, the information herein, including our CMMC related offerings, may be enhanced in the future to align with future guidance from the DoD and CMMC Accreditation Body. Additionally, as of the date of this writing, the CMMC Accreditation Body has not certified any the third-party assessors and guidance on the formal assessment process is still under development. Please note that the information cutoff date for this post is October 2020, and that as of the date of this writing, CMMC developments and guidance are in progress. In this fourth blog of the series we will explore how to leverage Microsoft Azure for identification & authentication maturity.
Subsequent blogs in the series will delve into incident response, maintenance & media protection, recovery & risk management, security assessment & risk management, system & communications protection and system & information integrity.
This is the fourth in a ten-part blog series where we’ll demonstrate principles of the Cybersecurity Maturity Model Certification aligned with Microsoft Azure.
0 kommentar(er)
