The CMMC represents the Department of Defense’s continued effort to protect Controlled Unclassified Information (CUI) in the defense supply chain. Building on the 110 controls set forth in NIST SP 800-171, the CMMC specifies 173 security practices across five maturity processes. Starting in fiscal year 2021, the department will pilot the implementation of CMMC requirements for Level 3 and below.[...]