CMMC - Summit Technology | Utah’s Leading Managed IT Support Partner

TL;DR:

Imagine you have a house with valuable items inside, and you want to make sure it’s secure. You might install locks, alarms, and cameras to protect it. The Cybersecurity Maturity Model Certification (CMMC) is like a security system for companies that work with the U.S. Department of Defense (DoD). It ensures that these companies have the right protections in place to keep sensitive information safe from cyber threats. Just like you wouldn’t want a burglar to break into your house, the DoD doesn’t want hackers to steal important data from their contractors.

Details For the Techies:

The Cybersecurity Maturity Model Certification (CMMC) is a comprehensive framework developed by the U.S. Department of Defense (DoD) to enhance the cybersecurity posture of the Defense Industrial Base (DIB). The CMMC program requires all DoD contractors and subcontractors to implement specific cybersecurity practices and processes to protect Controlled Unclassified Information (CUI) and Federal Contract Information (FCI). The framework is structured into five maturity levels, each with increasing requirements for cybersecurity controls and processes. Level 1 focuses on basic cyber hygiene, while Level 5 requires advanced and progressive cybersecurity measures. The CMMC framework integrates various cybersecurity standards and best practices, including those from the National Institute of Standards and Technology (NIST). Certification is achieved through third-party assessments conducted by Certified Third Party Assessment Organizations (C3PAOs). The goal of CMMC is to ensure that DoD contractors can adequately protect sensitive information and contribute to the overall security of the defense supply chain.

Attack Surface

TL;DR: Imagine your company's digital environment as a fortress. The attack surface is like all the doors, windows, and secret passages that an attacker could use to break in. The more entry points there are, the more opportunities for a breach. Reducing the attack...

Bitlocker

TL;DR: Imagine you have a safe at home where you keep all your valuable items. Now, think of BitLocker as a digital safe for your computer. It locks up all the data on your computer's hard drive so that if someone tries to access it without your permission, they can't...

CIS Controls

TL;DR: Imagine your company's cybersecurity as a fortress. The CIS Controls are like a detailed blueprint for building and maintaining this fortress. They help you keep an eye on the walls (monitoring and maintaining cyber defenses), fix any cracks quickly (reducing...

Conditional Access Policies

TL;DR: Imagine you have a special key to access different rooms in a building. However, to use this key, you need to meet certain conditions. For example, you might need to show your ID or enter a password. Conditional Access Policies work similarly. They are like...

Consumption Based Services

TL;DR: Imagine you have a utility bill for your home. You only pay for the electricity, water, and gas you actually use each month, rather than paying a flat fee regardless of your consumption. Similarly, consumption-based services in cloud platforms like Microsoft...