Cybersecurity Maturity Model Certification version 1.0 (CMMC v1.0)

On January 31 the U.S. Department of Defense (DoD) issued CMMC v1.0, a new unified cybersecurity standard coupled with a certification program for all DoD contractors and subcontractors.

CMMC contains maturity processes and cybersecurity best practices progressing across five maturity levels, from basic cyber hygiene to advanced/progressive. CMMC is instrumental in establishing cybersecurity as a foundation for future DoD procurements, as it addresses the need to protect DoD’s unclassified information (i.e., Federal Contract Information and Controlled Unclassified Information) during the acquisition and sustainment of products and services. DoD plans to roll out CMMC over the next five years, first appearing in Requests for Information and Requests for Proposals in 2020 with full implementation planned by 2026.

While many questions remain, our overview of CMMC v1.0 provides background on the model and key considerations to assist your organization in understanding and adopting the framework, such as:

  • Features of the CMMC framework
  • CMMC implementation
  • The certification process
  • Key takeaways and recommendations

This overview provides general guidance on CMMC. We hope the overview is of interest to you and gives you helpful insights.

Read More: Everything you need to know about the Cybersecurity Maturity Model Certification Version 1.0 (CMMC v1.0)


Authored by Stacy Hadeka, Michael Scheimer and Michael Mason

Stacy Hadeka
Washington, D.C.
Mike Scheimer
Washington, D.C.
Michael Mason
Washington, D.C.


This website is operated by Hogan Lovells Solutions Limited, whose registered office is at 21 Holborn Viaduct, London, United Kingdom, EC1A 2DY. Hogan Lovells Solutions Limited is a wholly-owned subsidiary of Hogan Lovells International LLP but is not itself a law firm. For further details of Hogan Lovells Solutions Limited and the international legal practice that comprises Hogan Lovells International LLP, Hogan Lovells US LLP and their affiliated businesses ("Hogan Lovells"), please see our Legal Notices page. © 2022 Hogan Lovells.

Attorney advertising. Prior results do not guarantee a similar outcome.