5 CMMC Levels

Level 1 – Basic Cyber Hygiene

• Federal Contract Information
  • 17 Practices

Level 2 – Intermediate Cyber Hygiene

• Federal Contract Information
  • 72 Practices (L1 + 55 Practices)

Level 3 – Good Cyber Hygiene

• Controlled Unclassified Information
  • 130 Practices (L2 + Practices)

Level 4 – Proactive

• CUI + Controlled Technical Information
  • 156 – (L3 + 26 Practices)

Level 5 – Advanced/Progressive

• CUI + Controlled Technical Information
  • 171 (L4  + 15 Practices)