controls/frameworks/cmmc.json
|
{ "frameworkId": "cmmc", "label": "CMMC 2.0", "version": "2.0", "description": "Cybersecurity Maturity Model Certification — DoD framework protecting Controlled Unclassified Information (CUI) across the Defense Industrial Base supply chain. Three maturity levels: L1, L2, L3.", "homepageUrl": "https://dodcio.defense.gov/CMMC/", "css": "fw-cmmc", "totalControls": 110, "registryKey": "cmmc", "csvColumn": "Cmmc", "displayOrder": 7, "scoring": { "method": "maturity-level", "maturityLevels": { "L1": { "label": "Level 1 — Foundational", "description": "Basic safeguarding of Federal Contract Information (FCI)", "practiceCount": 17 }, "L2": { "label": "Level 2 — Advanced", "description": "Protection of Controlled Unclassified Information (CUI), aligned with NIST SP 800-171 Rev 2", "practiceCount": 110 }, "L3": { "label": "Level 3 — Expert", "description": "Enhanced protection against Advanced Persistent Threats (APTs), adds NIST SP 800-172 requirements", "practiceCount": 134 } } }, "colors": { "light": { "background": "#f0fdfa", "color": "#134e4a" }, "dark": { "background": "#134E4A", "color": "#5EEAD4" } } } |