Part 170 — Cybersecurity Maturity Model Certification (CMMC) Program
Current through Mar 4, 2026
Authority: 5 U.S.C. 301; Sec. 1648, Pub. L. 116-92, 133 Stat. 1198.
Source: 89 FR 83214, Oct. 15, 2024, unless otherwise noted.
Sections
- § 170.1 Purpose.
- § 170.2 Incorporation by reference.
- § 170.3 Applicability.
- § 170.4 Acronyms and definitions.
- § 170.5 Policy.
- § 170.6 CMMC PMO.
- § 170.7 DCMA DIBCAC.
- § 170.8 Accreditation Body.
- § 170.9 CMMC Third-Party Assessment Organizations (C3PAOs).
- § 170.10 CMMC Assessor and Instructor Certification Organization (CAICO).
- § 170.11 CMMC Certified Assessor (CCA).
- § 170.12 CMMC Instructor.
- § 170.13 CMMC Certified Professional (CCP).
- § 170.14 CMMC Model.
- § 170.15 CMMC Level 1 self-assessment and affirmation requirements.
- § 170.16 CMMC Level 2 self-assessment and affirmation requirements.
- § 170.17 CMMC Level 2 certification assessment and affirmation requirements.
- § 170.18 CMMC Level 3 certification assessment and affirmation requirements.
- § 170.19 CMMC scoping.
- § 170.20 Standards acceptance.
- § 170.21 Plan of Action and Milestones requirements.
- § 170.22 Affirmation.
- § 170.23 Application to subcontractors.
- § 170.24 CMMC Scoring Methodology.
- Appendix A to Part 170—Guidance