CMMC 2.0
What is CMMC 2.0?
Cybersecurity Maturity Model Certification for defense industrial base. It comprises 110 controls organised across 14 domains, published by U.S. Department of Defense, and applies in the United States.
How CMMC 2.0 maps to other frameworks
All 110 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 14 domains CMMC 2.0 groups its controls into
Where CMMC 2.0 overlaps with the standards you already hold
Training that covers CMMC 2.0
What CMMC 2.0 means in your sector
What CMMC 2.0 means for your job
Questions people ask about CMMC 2.0
What is CMMC 2.0?
How many controls does CMMC 2.0 have?
Where does CMMC 2.0 apply?
What frameworks does CMMC 2.0 map to?
How do I get started with CMMC 2.0 compliance?
Query CMMC 2.0 programmatically
CMMC 2.0, its 110 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
CMMC 2.0 API reference and MCP config →What CMMC 2.0 requires, control by control
Each page carries the requirement text for one CMMC 2.0 control and what an assessor expects to see as evidence.
- AC-L2-3-1-1 Authorized Access Control
- AC-L2-3-1-10 Session Lock
- AC-L2-3-1-11 Session Termination
- AC-L2-3-1-12 Control Remote Access
- AC-L2-3-1-13 Remote Access Confidentiality
- AC-L2-3-1-14 Remote Access Routing
- AC-L2-3-1-15 Privileged Remote Access
- AC-L2-3-1-16 Wireless Access Authorization
- AC-L2-3-1-17 Wireless Access Protection
- AC-L2-3-1-18 Mobile Device Connection
How much of another standard CMMC 2.0 already covers
Each crosswalk is judged control by control, and the mappings that were rejected are kept alongside the ones that held.
- ACSC Essential Eight to CMMC 2.0 crosswalk
- ANSSI Guide d'hygiene informatique (42 mesures, v2.0) to CMMC 2.0 crosswalk
- ASD Strategies to Mitigate Cyber Security Incidents to CMMC 2.0 crosswalk
- Australia Consumer Data Right - Banking (CDR) to CMMC 2.0 crosswalk
- AWS Well-Architected Security Pillar to CMMC 2.0 crosswalk
- Azure Security Benchmark to CMMC 2.0 crosswalk
- C5 (Germany) to CMMC 2.0 crosswalk
- CFTC System Safeguards (17 CFR 37, 38, 39, 49) to CMMC 2.0 crosswalk
How ready are you for CMMC 2.0?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.