The Cybersecurity Maturity Model Certification (CMMC) Program was created to ensure organizations working with or within the Defense Industrial Base (DIB) met a baseline level of protections and practices in place for CUI. After proposing the first version, there was significant feedback that caused a review period and the eventual release of CMMC 2.0.
