Over the past several years, there have been many damaging breaches of both classified and unclassified government data. These breaches have resulted in the unauthorized disclosure of a wide range of sensitive information. The Federal government has now instituted measures to protect this data by imposing legal and contractual requirements on defense contractors, through a mechanism known as the Cybersecurity Maturity Model Certification (CMMC). This course is designed for security professionals requiring an initial exposure to the CMMC requirement recently levied by the U.S. Government on its supply and service providers. In this course, Security Compliance: CMMC, you will learn what the CMMC actually is, and why it was created. First, you’ll explore the key U.S. Government regulations involved with imposing the CMMC on Department of Defense contractors, including the Defense Federal Acquisition Regulations. Next, your will discover the NIST Special Publication 800-171 series. Then, you’ll understand the structure of the CMMC model, including its levels, controls, and practices. Finally, you’ll be able to understand the challenges and process involved with achieving all 3 Levels of the CMMC Maturity Model. By the end of this course, you’ll understand how the CMMC could apply to the various scenarios in which defense contractors may be situated.
Author Name: Bobby Rogers
Author Description:
Bobby E. Rogers is an information security engineer working as a contractor for Department of Defense agencies, helping to secure, certify, and accredit their information systems. His duties include information system security engineering, risk management, and certification and accreditation efforts. He retired after 21 years in the U.S. Air Force, serving as a network security engineer and instructor, and has secured networks all over the world. Bobby has a master’s degree in information assura… more