CMMC

Cyber Security Maturity Model

" Understand what CUI and FCI data is, start audit where you store, transmit and process that data. Think and approach from data centric perspective"

US defense Industrial Base (DIB) Supply caing Risk Management(SCRM)

NIST SP 800-171

Assessment:

• Examine

• Interview

• Test

References:

1. https://learn.microsoft.com/en-us/azure/compliance/offerings/offering-cmmc

2. https://learn.microsoft.com/en-us/azure/compliance/offerings/offering-dfars

3. https://cyberab.org/

4. https://www.federalregister.gov/documents/2021/11/17/2021-24880/cybersecurity-maturity-model-certification-cmmc-20-updates-and-way-forward

5. https://csrc.nist.gov/pubs/sp/800/171/r3/final

6. https://dodcio.defense.gov/CMMC/

7. https://learn.microsoft.com/en-us/azure/key-vault/keys/about-keys#compliance

8. https://learn.microsoft.com/en-us/azure/key-vault/general/overview#securely-store-secrets-and-keys

9. https://learn.microsoft.com/en-us/azure/compliance/offerings/offering-fips-140-2

10. https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-plan-security#managing-secrets

11. https://learn.microsoft.com/en-us/azure/compliance/offerings/offering-fips-140-2