White Paper
Cybersecurity Maturity Model Certification (CMMC) Version 1.02
The Cybersecurity Maturity Model Certification (CMMC) was created to secure unclassified information within the U.S. Department of Defense supply chain, protecting Federal Contract Information and Controlled Unclassified Information. It defines five levels of maturity across 17 domains and 171 practices, moving from basic to advanced cybersecurity. Compliance is mandatory for all DoD contractors, shifting from self-certification to formal third-party assessments. CyberArk helps organizations meet CMMC requirements by securing privileged accounts, enforcing access controls, auditing activity, and integrating with broader security tools. Its solutions address most technical controls, enabling consistent processes, risk reduction, and improved compliance.