Cybersecurity Maturity Model Certification

The Cybersecurity Maturity Model Certification (CMMC) is an assessment framework and assessor certification program designed to increase the trust in measures of compliance to a variety of standards published by the National Institute of Standards and Technology. ^[1]

Ask AI

Table of Contents

1. 24 relations: Applied Physics Laboratory, Assistant Secretary of Defense for Networks and Information Integration, Capability Maturity Model Integration, Carnegie Mellon University, Code of Federal Regulations, Common Criteria, Controlled Unclassified Information, Defense industrial base, Federal Acquisition Regulation, Federal Information Security Management Act of 2002, FedRAMP, FIPS 140, FIPS 140-2, FIPS 140-3, FIPS 199, General Services Administration, Information system, National Institute of Standards and Technology, National Science Foundation, NIST Special Publication 800-53, Request for proposal, Under Secretary of Defense for Acquisition and Sustainment, United States Department of Defense, United States Secretary of Commerce.

2. Computer security standards

Applied Physics Laboratory

The Johns Hopkins University Applied Physics Laboratory (or simply Applied Physics Laboratory, or APL) is a not-for-profit university-affiliated research center (UARC) in Howard County, Maryland.

See Cybersecurity Maturity Model Certification and Applied Physics Laboratory

Assistant Secretary of Defense for Networks and Information Integration

The Assistant Secretary of Defense for Networks & Information Integration (ASD(NII)) was an appointed position that provided management and oversight of all DoD information technology, including national security systems.

See Cybersecurity Maturity Model Certification and Assistant Secretary of Defense for Networks and Information Integration

Capability Maturity Model Integration

Capability Maturity Model Integration (CMMI) is a process level improvement training and appraisal program.

See Cybersecurity Maturity Model Certification and Capability Maturity Model Integration

Carnegie Mellon University

Carnegie Mellon University (CMU) is a private research university in Pittsburgh, Pennsylvania.

See Cybersecurity Maturity Model Certification and Carnegie Mellon University

Code of Federal Regulations

In the law of the United States, the Code of Federal Regulations (CFR) is the codification of the general and permanent regulations promulgated by the executive departments and agencies of the federal government of the United States.

See Cybersecurity Maturity Model Certification and Code of Federal Regulations

Common Criteria

The Common Criteria for Information Technology Security Evaluation (referred to as Common Criteria or CC) is an international standard (ISO/IEC 15408) for computer security certification. Cybersecurity Maturity Model Certification and Common Criteria are computer security standards.

See Cybersecurity Maturity Model Certification and Common Criteria

Controlled Unclassified Information

Controlled Unclassified Information (CUI) is a category of unclassified information within the U.S. Federal government.

See Cybersecurity Maturity Model Certification and Controlled Unclassified Information

Defense industrial base

In political science, the defense industrial base (or DIB), or defense industrial and technological base is a government's industrial assets that are of direct or indirect importance for the production of equipment for a country's armed forces.

See Cybersecurity Maturity Model Certification and Defense industrial base

Federal Acquisition Regulation

The Federal Acquisition Regulation (FAR) is the principal set of rules regarding Government procurement in the United States,.

See Cybersecurity Maturity Model Certification and Federal Acquisition Regulation

Federal Information Security Management Act of 2002

The Federal Information Security Management Act of 2002 (FISMA,, et seq.) is a United States federal law enacted in 2002 as Title III of the E-Government Act of 2002. The act recognized the importance of information security to the economic and national security interests of the United States.

See Cybersecurity Maturity Model Certification and Federal Information Security Management Act of 2002

FedRAMP

The Federal Risk and Authorization Management Program (FedRAMP) is a United States federal government-wide compliance program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. Cybersecurity Maturity Model Certification and FedRAMP are computer security standards.

See Cybersecurity Maturity Model Certification and FedRAMP

FIPS 140

The 140 series of Federal Information Processing Standards (FIPS) are U.S. government computer security standards that specify requirements for cryptographic modules. Cybersecurity Maturity Model Certification and FIPS 140 are computer security standards.

See Cybersecurity Maturity Model Certification and FIPS 140

FIPS 140-2

The Federal Information Processing Standard Publication 140-2, (FIPS PUB 140-2), is a U.S. government computer security standard used to approve cryptographic modules. Cybersecurity Maturity Model Certification and FIPS 140-2 are computer security standards.

See Cybersecurity Maturity Model Certification and FIPS 140-2

FIPS 140-3

The Federal Information Processing Standard Publication 140-3 (FIPS PUB 140-3) is a U.S. government computer security standard used to approve cryptographic modules. Cybersecurity Maturity Model Certification and FIPS 140-3 are computer security standards.

See Cybersecurity Maturity Model Certification and FIPS 140-3

FIPS 199

FIPS 199 (Federal Information Processing Standard Publication 199, Standards for Security Categorization of Federal Information and Information Systems) is a United States Federal Government standard that establishes security categories of information systems used by the Federal Government, one component of risk assessment. Cybersecurity Maturity Model Certification and FIPS 199 are computer security standards.

See Cybersecurity Maturity Model Certification and FIPS 199

General Services Administration

The General Services Administration (GSA) is an independent agency of the United States government established in 1949 to help manage and support the basic functioning of federal agencies.

See Cybersecurity Maturity Model Certification and General Services Administration

Information system

An information system (IS) is a formal, sociotechnical, organizational system designed to collect, process, store, and distribute information.

See Cybersecurity Maturity Model Certification and Information system

National Institute of Standards and Technology

The National Institute of Standards and Technology (NIST) is an agency of the United States Department of Commerce whose mission is to promote American innovation and industrial competitiveness.

See Cybersecurity Maturity Model Certification and National Institute of Standards and Technology

National Science Foundation

The U.S. National Science Foundation (NSF) is an independent agency of the United States federal government that supports fundamental research and education in all the non-medical fields of science and engineering.

See Cybersecurity Maturity Model Certification and National Science Foundation

NIST Special Publication 800-53

NIST Special Publication 800-53 is an information security standard that provides a catalog of privacy and security controls for information systems.

See Cybersecurity Maturity Model Certification and NIST Special Publication 800-53

Request for proposal

A request for proposal (RFP) is a form of reverse auction that solicits a business proposal by an organisation interested in the procurement of a service or product from potential suppliers.

See Cybersecurity Maturity Model Certification and Request for proposal

Under Secretary of Defense for Acquisition and Sustainment

The Under Secretary of Defense for Acquisition and Sustainment, or USD (A&S), is the Principal Staff Assistant (PSA) and advisor to the Secretary of Defense for all matters relating to acquisition and sustainment in the Department of Defense.

See Cybersecurity Maturity Model Certification and Under Secretary of Defense for Acquisition and Sustainment

United States Department of Defense

The United States Department of Defense (DoD, USDOD, or DOD) is an executive branch department of the federal government of the United States charged with coordinating and supervising all agencies and functions of the U.S. government directly related to national security and the United States Armed Forces.

See Cybersecurity Maturity Model Certification and United States Department of Defense

United States Secretary of Commerce

The United States secretary of commerce (SecCom) is the head of the United States Department of Commerce.

See Cybersecurity Maturity Model Certification and United States Secretary of Commerce

See also

Computer security standards

• BS 7799
• Blacker (security)
• Canadian Trusted Computer Product Evaluation Criteria
• Common Criteria
• Common Vulnerability Scoring System
• Content Security Policy
• Cyber Resilience Review
• Cybersecurity Maturity Model Certification
• FIPS 140
• FIPS 140-2
• FIPS 140-3
• FIPS 199
• FedRAMP
• HTTP Strict Transport Security
• IASME
• IEC 60870-6
• IEC 62443
• IEEE 802.10
• ISO/IEC 27002
• ISO/IEC 27017
• ISO/IEC 27018
• ISO/IEC 27019
• ITSEC
• Information security standards
• NIST Cybersecurity Framework
• Pluggable authentication module
• Rainbow Series
• S/MIME
• Same-origin policy
• Security Content Automation Protocol
• Standard of Good Practice for Information Security
• TIBER
• Transport Layer Security
• Trusted Computer System Evaluation Criteria

References

[1] https://en.wikipedia.org/wiki/Cybersecurity_Maturity_Model_Certification

Also known as CMMC.

Unionpedia is a concept map or semantic network organized like an encyclopedia – dictionary. It gives a brief definition of each concept and its relationships.

This is a giant online mental map that serves as a basis for concept diagrams. It's free to use and each article or document can be downloaded. It's a tool, resource or reference for study, research, education, learning or teaching, that can be used by teachers, educators, pupils or students; for the academic world: for school, primary, secondary, high school, middle, technical degree, college, university, undergraduate, master's or doctoral degrees; for papers, reports, projects, ideas, documentation, surveys, summaries, or thesis. Here is the definition, explanation, description, or the meaning of each significant on which you need information, and a list of their associated concepts as a glossary. Available in English, Spanish, Portuguese, Japanese, Chinese, French, German, Italian, Polish, Dutch, Russian, Arabic, Hindi, Swedish, Ukrainian, Hungarian, Catalan, Czech, Hebrew, Danish, Finnish, Indonesian, Norwegian, Romanian, Turkish, Vietnamese, Korean, Thai, Greek, Bulgarian, Croatian, Slovak, Lithuanian, Filipino, Latvian, Estonian and Slovenian. More languages soon.

The information is based on Wikipedia articles and other Wikimedia projects, and it's available under the Creative Commons Attribution-ShareAlike License.

Unionpedia is not endorsed by or affiliated with the Wikimedia Foundation.

Google Play, Android and the Google Play logo are trademarks of Google Inc.

Privacy Policy