Official CMMC program overview
Official source link for readers to verify current requirements and program language.
Source list
Official sources used for this site
This page collects the official sources used to ground the educational articles. Requirements can change, and contract-specific instructions can override a general summary.
Official CMMC resources and implementation notices
Official source link for readers to verify current requirements and program language.
FAR 52.204-21: Basic Safeguarding of Covered Contractor Information Systems
Official source link for readers to verify current requirements and program language.
DFARS 252.204-7012: Safeguarding Covered Defense Information and Cyber Incident Reporting
Official source link for readers to verify current requirements and program language.
DFARS 252.204-7019: Notice of NIST SP 800-171 DoD Assessment Requirements
Official source link for readers to verify current requirements and program language.
DFARS 252.204-7020: NIST SP 800-171 DoD Assessment Requirements
Official source link for readers to verify current requirements and program language.
NIST SP 800-171 Rev. 3
Official source link for readers to verify current requirements and program language.
NIST SP 800-171A Rev. 3
Official source link for readers to verify current requirements and program language.
NARA CUI Registry
Official source link for readers to verify current requirements and program language.
NARA: About Controlled Unclassified Information
Official source link for readers to verify current requirements and program language.
The Cyber AB: CMMC ecosystem roles
Official source link for readers to verify current requirements and program language.
Canada.ca: Cyber security certification for defence suppliers in Canada
Official source link for readers to verify current requirements and program language.
Canada.ca: Canadian Program for Cyber Security Certification Level 1 criteria
Official source link for readers to verify current requirements and program language.
Canada.ca: How to meet Level 1 cyber security certification requirements
Official source link for readers to verify current requirements and program language.
Canada.ca: Level 1 cyber certification scoping guide
Official source link for readers to verify current requirements and program language.
Canada.ca: Security screening for government contracts
Official source link for readers to verify current requirements and program language.
Canada.ca: Security requirements for contracting with the Government of Canada
Official source link for readers to verify current requirements and program language.
Canada.ca: Levels of security
Official source link for readers to verify current requirements and program language.
Canada.ca: Controlled Goods Program registration guideline
Official source link for readers to verify current requirements and program language.
Canada.ca: Controlled goods: examining, possessing or transferring
Official source link for readers to verify current requirements and program language.
Important source note
Official pages should control over this site. For real contract, legal, compliance, security, or IT decisions, verify the current official source and consult qualified professionals.