US · Defence
CMMC
The US Department of Defense's Cybersecurity Maturity Model Certification.
Who it applies to
Defence contractors that handle federal contract information or CUI.
What it can cost
Lost deals, failed audits and penalties set by your regulator or contract.
- Program
- CMMC 2.0
- Levels
- Level 1, 2 and 3
- Level 2
- The 110 requirements of NIST 800-171
What CMMC asks of you
- 01Access control
- 02Incident response
- 03Configuration management
- 04Risk assessment
- 05System and information integrity
- 06Security assessment
How orta covers CMMC
110 CMMC requirements, mapped
Each requirement is linked to orta's common controls, so evidence you already have counts here too.
Checked from your own systems
Host, Kubernetes and AWS checks run on a schedule and mark controls passing or failing, every day.
Ready for your auditor
Give them a read-only login to see controls, evidence and documents in one place.
