CMMC Level 3

Overview

The Cybersecurity Maturity Model Certification (CMMC) is a US Department of Defense framework that measures cybersecurity maturity across defense contractors. Level 3 (Expert) requires implementation of over 130 practices from NIST 800-172 in addition to NIST 800-171 requirements. It is required for contracts involving the most sensitive Controlled Unclassified Information. CodeMiners maintains CMMC Level 3 readiness to support defense industrial base clients handling critical national security information.

Governing Body

US Department of Defense, Cyber AB (CMMC Accreditation Body)

Scope of Certification

Covers all NIST 800-171 requirements plus enhanced security requirements from NIST 800-172. Addresses advanced persistent threats (APTs) and requires proactive security measures including penetration testing, threat hunting, and security operations center (SOC) capabilities.

Audit and Assessment Process

Level 3 assessment is conducted by the Defense Industrial Base Cybersecurity Assessment Center (DIBCAC), a government-led assessment organization. The assessment evaluates implementation of all required practices and includes documentation review, interviews, and technical testing.

Key Requirements

1. All NIST 800-171 requirements (110 practices)
2. Additional NIST 800-172 enhanced security requirements
3. Security Operations Center (SOC) or equivalent monitoring
4. Threat hunting and advanced threat detection
5. Penetration testing program
6. Supply chain security controls

Compliance Entitlements

• Highest CMMC maturity level for defense contractors
• Builds on NIST 800-171 with additional 800-172 enhanced controls
• Required for contracts involving sensitive CUI and critical programs
• Assessed by the Defense Industrial Base Cybersecurity Assessment Center (DIBCAC)

Client Benefits

• Enables CodeMiners to support the most sensitive DoD programs
• Provides the highest available assurance for defense contractor cybersecurity
• Required for contracts marked CMMC Level 3 in solicitations

Related Certifications