The Strategy Behind Meeting CMMC Requirements

The purpose of the Cybersecurity Maturity Model Certification is to have in place the security and privacy controls that give information systems greater resilience in the face of a wide range of dangers, including malicious attacks, natural disasters, structural shortcomings, human error, and hostile nation-state surveillance. The catalog of controls is laid out in the National Institute of Standards and Technology Special Publication 800-53 Rev. 5.

At a strategic level, the effectiveness of these controls depends upon synchronizing data, assets, and users within a Zero Trust Architecture that ensures continuous verification and fortified security – the mantra of “never trust, always verify.”

Learning Objectives:

• Review the systems already in place and the role that data, assets, and employees play in protecting themselves and each other
• Outline the strategic objectives your agency looks to codify by implementing CMMC
• Delineate the steps needed to achieve those objectives