The CMMC will take the role of the present DFARS 252.204-7012 provision that military companies must comply with when enrolling into an agreement with the Pentagon. CMMC adherence covers five tiers, with the third constituting the minimal required for working with controlled unclassified information, modeled on the NIST SP 800-171 structure but incorporating numerous other […]