New CMMC Rule Offers Tiered Security Levels for Contractors

[rbc]

The U.S. Department of Defense released a draft of a long-awaited proposed rule for the Cybersecurity Maturity Model Certification program that aims to simplify compliance, enhance public-private coordination and better protect sensitive information from cyberthreats.

The proposed rule, designed to establish a security framework for the defense industrial base, introduces a tiered security model for contractors and subcontractors who manage sensitive unclassified information. The tiers are categorized into three levels. Level 1 represents the most basic security measures and Level 3 requires the most advanced ones.
[...]
New CMMC Rule Offers Tiered Security Levels for Contractors