Framework module · cmmc-2-0
CMMC
The certification a defense contractor needs to hold Federal Contract Information or Controlled Unclassified Information. Three levels: Foundational, Advanced, Expert.
2.0 (48 CFR final rule) · DoD CMMC Program · published 2025-09-10
Standing today
Catalog only
01Standing
Catalog only
A directory entry — authority, version ledger, verification — not a workspace you can open.
CMMC is tracked in the registry — authority, version ledger, verification — and nothing is modelled for it yet. Import its catalog to begin.
Freely published; model not ingested as a control catalog.
02Registry record
checked 2026-08-06
- Registry status
- Roadmap · modelledWe model the regime — control families and at least one crosswalk map on disk — but no control catalog is ingested.
- Control units
- Not on record — no catalog ingested and no authority-published count cited.
- Control families
- Level 1 — Foundational · Level 2 — Advanced · Level 3 — Expert
- Applies to
- defense industrial base · US
- Verification
- Secondary — corroborated across independent sources; the authority blocks automated fetch or does not state it plainly. checked 2026-08-06
- Pending change
- The 32 CFR program rule took effect 2024-12-16 and the 48 CFR acquisition rule took effect 2025-11-10, putting the CMMC clause into DoD contracts. Phase-in of level requirements continues across the contract lifecycle.Expected: Phased rollout through 2028
03Version ledger
2 editions
| 1.0 | Superseded | 2020-01-31 |
| 2.0 (48 CFR final rule) | Current edition · supersedes 1.0 | 2025-09-10 |