Access Control (AC)
Audit & Accountability (AU)
Awareness & Training (AT)
Configuration Management (CM)
Identification & Authentication (IA)
Incident Response (IR)
Maintenance (MA)
Media Protection (MP)
Personnel Security (PS)
Physical Protection (PE)
Risk Assessment (RA)
Security Assessment (CA)
Systems & Communications Protection (SC)
System & Information Integrity (SI)
Level 5 Overview |
General CMMC practice expectations at this level: Demonstrate a proven ability to optimize capabilities in an effort to repel advanced persistent threats.
Practices: Although CMMC Level 5 itself has 15 practices, it also combines the practices of lower levels for a total of 171 practices.
CMMC Process Maturity Expectations: Activities are standardized across all applicable organizational units and identified improvements are shared.
Copyright © 2022 Celerium. All Rights Reserved.