Cybersecurity Maturity Model Certification (CMMC) – Level 2

As cybersecurity requirements grow more rigorous across the defense industrial base, understanding and implementing CMMC 2.0 Level 2 is essential for organizations handling Controlled Unclassified Information (CUI). This comprehensive seven week course equips participants with knowledge and tools to interpret, implement and maintain the 110 security practices aligned with NIST SP 800-171 r2.

Through a mix of instructions, case studies, and hands-on exercises, participants will gain practical experience with system security plans (SSPs), plans of action and milestones (POA&Ms), including response planning, access controls, and more. The course also demystifies the CMMC assessment process, offering guidance on how to prepare for both self-assessments and Certified Third-Party Assessment Organization (C3PAO).

Whether you're new to cybersecurity compliance or seeking to strengthen your organization's defense posture, this course provides a solid foundation for achieving and sustaining CMMC Level 2 compliance.

Key Takeaways:

Understand CMMC 2.0 Level 2 requirements and assessment criteria
Map NIST SP 800-171 controls: IT systems, policies, procedures, controls and practices
Develop core compliance documentation: SSPs, POA&Ms, risk assessments, policies and procedures
Prepare for CMMC Level 2 assessment

Pre-requisites

While CMMC Level 1 compliance is not a pre-requisites, it is recommended that students are familiar with the audit controls and practices for Level 1 (FAR 52.204-21) before embarking on this course.