Cybersecurity Maturity Model (CMMC) Level 3 Assessment
This library of Cybersecurity Playbooks provides a set of fully loaded and editable templates that represent the core of what is generally required by management (including process owners), boards of directors and their audit committees, as well as internal and external auditors of relevant organizations, to document, assess, test, report and oversee the design and operating effectiveness of the typical key internal controls on which management is reliant to maintain compliance with Cybersecurity regulatory requirements.
They are drawn from a range of authoritative sources including the National Institute of Standards and Technology (NIST), the Federal Financial Institutions Examination Council's (FFIEC), the Department of Defense, the SEC's Office of Compliance Inspections and Examinations (OCIE), and the New York Department of Financial Services (NYDFS).
Download the Playbook
Unlock access to a wealth of information.
What is the Cybersecurity Maturity Model (CMMC) Level 3 Assessment Playbook?
The Cybersecurity Maturity Model (CMMC) Level 3 Assessment Playbook consists of:
- 17 CMMC Domains
- 130 Practices, and
- 290 Potential Assessment Considerations
For a CMMC Level 3 assessment, the practices and processes that encompass CMMC Levels 1, 2, and 3 apply.
CMMC Level 2 is a transitional level.
CMMC Level 3 consists of the security requirements specified in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, Protecting Controlled Unclassified Information (CUI) in Nonfederal Systems and Organizations.
You Also Get
Policy Document Template
These templates are designed to be a starting point for your clients, which can be tailored for your client's specific organizational needs.
Overview Flow Charts
A diagrammatic representation of the flow of assessment activities within your playbook.
Our instructions for use. These are the same for all our playbooks, once you know how to use one, you can use them all.
A PowerPoint tutorial on the specific playbook, covering the most important aspects of this area of assessment.