{"id":476565,"date":"2023-08-09T07:31:20","date_gmt":"2023-08-09T07:31:20","guid":{"rendered":""},"modified":"2023-09-05T11:13:00","modified_gmt":"2023-09-05T11:13:00","slug":"cybersecurity-maturity-model-certification","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/cn\/wiki\/cybersecurity-maturity-model-certification\/","title":{"rendered":"\u7f51\u7edc\u5b89\u5168\u6210\u719f\u5ea6\u6a21\u578b\u8ba4\u8bc1"},"content":{"rendered":"<p>\u7f51\u7edc\u5b89\u5168\u6210\u719f\u5ea6\u6a21\u578b\u8ba4\u8bc1 (CMMC) \u662f\u4e00\u4e2a\u7efc\u5408\u6846\u67b6\uff0c\u65e8\u5728\u589e\u5f3a\u56fd\u9632\u5de5\u4e1a\u57fa\u7840 (DIB) \u9886\u57df\u516c\u53f8\u548c\u7ec4\u7ec7\u7684\u7f51\u7edc\u5b89\u5168\u6001\u52bf\u3002 CMMC \u7531\u7f8e\u56fd\u56fd\u9632\u90e8 (DoD) \u7275\u5934\uff0c\u65e8\u5728\u4fdd\u62a4\u4e0e\u627f\u5305\u5546\u548c\u5206\u5305\u5546\u5171\u4eab\u7684\u654f\u611f\u653f\u5e9c\u6570\u636e\u548c\u4fe1\u606f\uff0c\u786e\u4fdd\u6574\u4e2a\u4f9b\u5e94\u94fe\u62e5\u6709\u5f3a\u5927\u7684\u7f51\u7edc\u5b89\u5168\u57fa\u7840\u8bbe\u65bd\u3002<\/p>\n<h2>\u7f51\u7edc\u5b89\u5168\u6210\u719f\u5ea6\u6a21\u578b\u8ba4\u8bc1\u7684\u8d77\u6e90\u548c\u9996\u6b21\u63d0\u53ca\u7684\u5386\u53f2\u3002<\/h2>\n<p>CMMC \u7684\u60f3\u6cd5\u53ef\u4ee5\u8ffd\u6eaf\u5230 2018 \u5e74\u7684\u56fd\u9632\u6388\u6743\u6cd5\u6848 (NDAA)\uff0c\u5176\u4e2d\u51fa\u73b0\u4e86\u5bf9\u654f\u611f\u6570\u636e\u4fdd\u62a4\u7684\u62c5\u5fe7\u3002\u4e3a\u4e86\u5e94\u5bf9\u65e5\u76ca\u589e\u957f\u7684\u7f51\u7edc\u5a01\u80c1\uff0c\u56fd\u9632\u90e8\u8ba4\u8bc6\u5230\u5176\u627f\u5305\u5546\u9700\u8981\u91c7\u7528\u66f4\u52a0\u6807\u51c6\u5316\u7684\u7f51\u7edc\u5b89\u5168\u5b9e\u8df5\u65b9\u6cd5\u3002\u7f8e\u56fd\u56fd\u9632\u90e8\u4e8e 2019 \u5e74\u9996\u6b21\u516c\u5f00\u63d0\u53ca CMMC \u6a21\u578b\uff0c\u4f5c\u4e3a\u5176\u964d\u4f4e\u7f51\u7edc\u98ce\u9669\u548c\u4fdd\u62a4\u91cd\u8981\u4fe1\u606f\u7684\u52aa\u529b\u7684\u4e00\u90e8\u5206\u3002<\/p>\n<h2>\u6709\u5173\u7f51\u7edc\u5b89\u5168\u6210\u719f\u5ea6\u6a21\u578b\u8ba4\u8bc1\u7684\u8be6\u7ec6\u4fe1\u606f<\/h2>\n<p>\u7f51\u7edc\u5b89\u5168\u6210\u719f\u5ea6\u6a21\u578b\u8ba4\u8bc1\u5206\u4e3a\u4e94\u4e2a\u7ea7\u522b\uff0c\u6bcf\u4e2a\u7ea7\u522b\u4ee3\u8868\u66f4\u9ad8\u7a0b\u5ea6\u7684\u7f51\u7edc\u5b89\u5168\u6210\u719f\u5ea6\u3002\u8fd9\u4e9b\u7ea7\u522b\u6db5\u76d6\u4ece\u57fa\u672c\u7684\u7f51\u7edc\u536b\u751f\u5b9e\u8df5\u5230\u9ad8\u7ea7\u5b89\u5168\u529f\u80fd\u3002 CMMC \u7684\u4e3b\u8981\u91cd\u70b9\u662f\u4fdd\u62a4\u56fd\u9632\u90e8\u4e0e\u5176\u627f\u5305\u5546\u5171\u4eab\u7684\u53d7\u63a7\u975e\u673a\u5bc6\u4fe1\u606f (CUI) \u548c\u8054\u90a6\u5408\u540c\u4fe1\u606f (FCI)\u3002<\/p>\n<h2>\u7f51\u7edc\u5b89\u5168\u6210\u719f\u5ea6\u6a21\u578b\u8ba4\u8bc1\u7684\u5185\u90e8\u7ed3\u6784<\/h2>\n<p>CMMC \u6846\u67b6\u5c06\u5404\u79cd\u7f51\u7edc\u5b89\u5168\u6807\u51c6\u548c\u6700\u4f73\u5b9e\u8df5\u7ed3\u5408\u5230\u4e00\u4e2a\u7edf\u4e00\u7684\u7ed3\u6784\u4e2d\u3002\u5728\u6bcf\u4e2a\u7ea7\u522b\uff0c\u7ec4\u7ec7\u5fc5\u987b\u8bc1\u660e\u5176\u9075\u5b88\u4e00\u7ec4\u7279\u5b9a\u7684\u5b9e\u8df5\u548c\u6d41\u7a0b\uff0c\u5e76\u901a\u8fc7\u7ecf\u8fc7\u8ba4\u8bc1\u7684\u7b2c\u4e09\u65b9\u8bc4\u4f30\u673a\u6784 (C3PAO) \u8fdb\u884c\u7684\u5ba1\u6838\u548c\u8bc4\u4f30\u8fdb\u884c\u8bc4\u4f30\u3002 CMMC\u7684\u5185\u90e8\u7ed3\u6784\u5305\u62ec\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u57df\u540d<\/strong>\uff1a\u8fd9\u4e9b\u4ee3\u8868\u5173\u952e\u7684\u7f51\u7edc\u5b89\u5168\u9886\u57df\uff0c\u4f8b\u5982\u8bbf\u95ee\u63a7\u5236\u3001\u4e8b\u4ef6\u54cd\u5e94\u3001\u98ce\u9669\u7ba1\u7406\u4ee5\u53ca\u7cfb\u7edf\u548c\u4fe1\u606f\u5b8c\u6574\u6027\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u80fd\u529b<\/strong>\uff1a\u6bcf\u4e2a\u9886\u57df\u90fd\u5206\u4e3a\u80fd\u529b\uff0c\u8fd9\u4e9b\u80fd\u529b\u5b9a\u4e49\u4e86\u7ec4\u7ec7\u4e3a\u6ee1\u8db3\u8be5\u9886\u57df\u7684\u8981\u6c42\u800c\u5e94\u5b9e\u73b0\u7684\u5177\u4f53\u6210\u679c\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u5b9e\u8df5<\/strong>\uff1a\u5b9e\u8df5\u662f\u7ec4\u7ec7\u4e3a\u6ee1\u8db3\u80fd\u529b\u800c\u5fc5\u987b\u5b9e\u65bd\u7684\u5177\u4f53\u6d3b\u52a8\u548c\u884c\u52a8\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6d41\u7a0b<\/strong>\uff1a\u6d41\u7a0b\u662f\u6307\u4e3a\u5b9e\u73b0\u6240\u9700\u5b9e\u8df5\u800c\u8fdb\u884c\u7684\u6d3b\u52a8\u7684\u8bb0\u5f55\u548c\u7ba1\u7406\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u7f51\u7edc\u5b89\u5168\u6210\u719f\u5ea6\u6a21\u578b\u8ba4\u8bc1\u5173\u952e\u7279\u5f81\u5206\u6790<\/h2>\n<p>CMMC \u7684\u4e3b\u8981\u7279\u70b9\u5305\u62ec\uff1a<\/p>\n<ul>\n<li>\n<p><strong>\u5206\u7ea7\u7ea7\u522b<\/strong>\uff1aCMMC \u7531\u4e94\u4e2a\u7ea7\u522b\u7ec4\u6210\uff0c\u63d0\u4f9b\u4e86\u7f51\u7edc\u5b89\u5168\u6210\u719f\u5ea6\u7684\u5206\u5c42\u65b9\u6cd5\uff0c\u4f7f\u7ec4\u7ec7\u80fd\u591f\u4ece\u57fa\u672c\u7684\u5b89\u5168\u5b9e\u8df5\u53d1\u5c55\u5230\u66f4\u590d\u6742\u7684\u5b89\u5168\u5b9e\u8df5\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u7b2c\u4e09\u65b9\u8bc4\u4f30<\/strong>\uff1a\u72ec\u7acb\u7684\u7b2c\u4e09\u65b9\u8bc4\u4f30\u673a\u6784\u8bc4\u4f30\u548c\u9a8c\u8bc1\u7ec4\u7ec7\u662f\u5426\u7b26\u5408 CMMC \u8981\u6c42\uff0c\u4ece\u800c\u63d0\u9ad8\u8ba4\u8bc1\u8fc7\u7a0b\u7684\u53ef\u4fe1\u5ea6\u548c\u5b8c\u6574\u6027\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u5b9a\u5236\u8ba4\u8bc1<\/strong>\uff1a\u7ec4\u7ec7\u53ef\u4ee5\u83b7\u5f97\u4e0e\u5176\u5de5\u4f5c\u6027\u8d28\u548c\u6240\u5904\u7406\u4fe1\u606f\u7684\u654f\u611f\u6027\u76f8\u79f0\u7684\u7ea7\u522b\u7684\u8ba4\u8bc1\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6301\u7eed\u76d1\u63a7<\/strong>\uff1aCMMC \u9700\u8981\u5b9a\u671f\u91cd\u65b0\u8bc4\u4f30\u548c\u6301\u7eed\u76d1\u63a7\uff0c\u4ee5\u786e\u4fdd\u6301\u7eed\u5408\u89c4\u3002<\/p>\n<\/li>\n<\/ul>\n<h2>\u7f51\u7edc\u5b89\u5168\u6210\u719f\u5ea6\u6a21\u578b\u8ba4\u8bc1\u7684\u7c7b\u578b<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u7b49\u7ea7<\/th>\n<th>\u63cf\u8ff0<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>1\u7ea7<\/td>\n<td>\u57fa\u672c\u7f51\u7edc\u536b\u751f\uff1a\u4fdd\u62a4\u8054\u90a6\u5408\u540c\u4fe1\u606f (FCI)<\/td>\n<\/tr>\n<tr>\n<td>2\u7ea7<\/td>\n<td>\u4e2d\u7ea7\u7f51\u7edc\u536b\u751f\uff1a\u4fdd\u62a4\u53d7\u63a7\u975e\u673a\u5bc6\u4fe1\u606f (CUI) \u7684\u8fc7\u6e21\u6b65\u9aa4<\/td>\n<\/tr>\n<tr>\n<td>3\u7ea7<\/td>\n<td>\u826f\u597d\u7684\u7f51\u7edc\u536b\u751f\uff1a\u4fdd\u62a4\u53d7\u63a7\u975e\u673a\u5bc6\u4fe1\u606f (CUI)<\/td>\n<\/tr>\n<tr>\n<td>4\u7ea7<\/td>\n<td>\u4e3b\u52a8\uff1aCUI \u7684\u9ad8\u7ea7\u4fdd\u62a4\u5e76\u964d\u4f4e\u9ad8\u7ea7\u6301\u7eed\u5a01\u80c1 (APT) \u7684\u98ce\u9669<\/td>\n<\/tr>\n<tr>\n<td>5\u7ea7<\/td>\n<td>\u9ad8\u7ea7\/\u6e10\u8fdb\uff1a\u4fdd\u62a4 CUI \u5e76\u5904\u7406 APT<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u7f51\u7edc\u5b89\u5168\u6210\u719f\u5ea6\u6a21\u578b\u8ba4\u8bc1\u7684\u4f7f\u7528\u65b9\u6cd5\u3001\u95ee\u9898\u4ee5\u53ca\u4e0e\u4f7f\u7528\u76f8\u5173\u7684\u89e3\u51b3\u65b9\u6848\u3002<\/h2>\n<h3>\u4f7f\u7528CMMC\u7684\u65b9\u6cd5<\/h3>\n<ol>\n<li>\n<p><strong>\u56fd\u9632\u90e8\u5408\u540c\u8d44\u683c<\/strong>\uff1a\u8981\u53c2\u4e0e DoD \u5408\u540c\uff0c\u7ec4\u7ec7\u5fc5\u987b\u8fbe\u5230\u7279\u5b9a\u7684 CMMC \u7ea7\u522b\uff0c\u5177\u4f53\u53d6\u51b3\u4e8e\u6240\u6d89\u53ca\u6570\u636e\u7684\u654f\u611f\u6027\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u4f9b\u5e94\u94fe\u5b89\u5168<\/strong>\uff1aCMMC \u786e\u4fdd\u5728\u6574\u4e2a DoD \u4f9b\u5e94\u94fe\u4e2d\u4e00\u81f4\u5b9e\u65bd\u7f51\u7edc\u5b89\u5168\u5b9e\u8df5\uff0c\u4fdd\u62a4\u654f\u611f\u4fe1\u606f\u514d\u906d\u6f5c\u5728\u6cc4\u9732\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u7ade\u4e89\u4f18\u52bf<\/strong>\uff1a\u5177\u6709\u8f83\u9ad8 CMMC \u7ea7\u522b\u7684\u7ec4\u7ec7\u53ef\u4ee5\u901a\u8fc7\u5c55\u793a\u5176\u5bf9\u7f51\u7edc\u5b89\u5168\u7684\u627f\u8bfa\uff0c\u5728\u56fd\u9632\u5408\u540c\u7ade\u6807\u4e2d\u83b7\u5f97\u7ade\u4e89\u4f18\u52bf\u3002<\/p>\n<\/li>\n<\/ol>\n<h3>\u95ee\u9898\u4e0e\u89e3\u51b3\u65b9\u6848<\/h3>\n<ol>\n<li>\n<p><strong>\u5b9e\u65bd\u6311\u6218<\/strong>\uff1a\u4e00\u4e9b\u7ec4\u7ec7\u53ef\u80fd\u96be\u4ee5\u5b9e\u65bd\u6240\u6709\u5fc5\u9700\u7684\u5b9e\u8df5\u3002\u8058\u8bf7\u7f51\u7edc\u5b89\u5168\u4e13\u5bb6\u5e76\u8fdb\u884c\u5b9a\u671f\u8bc4\u4f30\u53ef\u4ee5\u89e3\u51b3\u8fd9\u4e2a\u95ee\u9898\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6210\u672c\u548c\u8d44\u6e90\u5bc6\u96c6\u5ea6<\/strong>\uff1a\u8fbe\u5230\u66f4\u9ad8\u7684 CMMC \u6c34\u5e73\u53ef\u80fd\u9700\u8981\u5927\u91cf\u7684\u8d22\u529b\u548c\u4eba\u529b\u8d44\u6e90\u3002\u9002\u5f53\u7684\u89c4\u5212\u548c\u9884\u7b97\u53ef\u4ee5\u7f13\u89e3\u8fd9\u4e9b\u6311\u6218\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u7b2c\u4e09\u65b9\u8bc4\u4f30\u5458\u7684\u53ef\u7528\u6027<\/strong>\uff1a\u5bf9\u8ba4\u8bc1\u8bc4\u4f30\u5458\u7684\u9700\u6c42\u53ef\u80fd\u4f1a\u4f9b\u8fc7\u4e8e\u6c42\uff0c\u4ece\u800c\u5bfc\u81f4\u8ba4\u8bc1\u8fc7\u7a0b\u7684\u5ef6\u8bef\u3002\u6269\u5927\u8ba4\u53ef\u8bc4\u4f30\u5458\u7684\u6570\u91cf\u53ef\u4ee5\u5e2e\u52a9\u89e3\u51b3\u8fd9\u4e2a\u95ee\u9898\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u4e3b\u8981\u7279\u70b9\u53ca\u4e0e\u540c\u7c7b\u672f\u8bed\u7684\u5176\u4ed6\u6bd4\u8f83<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u5b66\u671f<\/th>\n<th>\u63cf\u8ff0<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>CMMC \u4e0e NIST CSF<\/td>\n<td>CMMC \u66f4\u5177\u89c4\u8303\u6027\uff0c\u9700\u8981\u8ba4\u8bc1\uff0c\u800c NIST \u7f51\u7edc\u5b89\u5168\u6846\u67b6 (CSF) \u662f\u81ea\u613f\u6027\u7684\uff0c\u5e76\u63d0\u4f9b\u57fa\u4e8e\u98ce\u9669\u7684\u65b9\u6cd5\u3002<\/td>\n<\/tr>\n<tr>\n<td>CMMC \u4e0e ISO 27001<\/td>\n<td>CMMC \u4e13\u6ce8\u4e8e\u4fdd\u62a4\u56fd\u9632\u5de5\u4e1a\u7684 CUI\uff0c\u800c ISO 27001 \u662f\u9002\u7528\u4e8e\u5404\u4e2a\u884c\u4e1a\u7684\u66f4\u5e7f\u6cdb\u7684\u6807\u51c6\u3002<\/td>\n<\/tr>\n<tr>\n<td>CMMC \u4e0e DFARS<\/td>\n<td>\u867d\u7136 CMMC \u8865\u5145\u4e86\u56fd\u9632\u8054\u90a6\u91c7\u529e\u6cd5\u89c4\u8865\u5145 (DFARS)\uff0c\u4f46 DFARS \u672c\u8eab\u4e0d\u63d0\u4f9b\u8ba4\u8bc1\u8981\u6c42\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u4e0e\u7f51\u7edc\u5b89\u5168\u6210\u719f\u5ea6\u6a21\u578b\u8ba4\u8bc1\u76f8\u5173\u7684\u672a\u6765\u89c2\u70b9\u548c\u6280\u672f<\/h2>\n<p>\u968f\u7740\u7f51\u7edc\u5a01\u80c1\u7684\u4e0d\u65ad\u53d1\u5c55\uff0cCMMC \u53ef\u80fd\u4f1a\u9002\u5e94\u548c\u96c6\u6210\u65b0\u5174\u6280\u672f\u3002\u4e00\u4e9b\u6f5c\u5728\u7684\u672a\u6765\u53d1\u5c55\u5305\u62ec\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u4eba\u5de5\u667a\u80fd\u9a71\u52a8\u7684\u7f51\u7edc\u5b89\u5168<\/strong>\uff1a\u4eba\u5de5\u667a\u80fd\u548c\u673a\u5668\u5b66\u4e60\u7684\u878d\u5408\uff0c\u589e\u5f3a\u5a01\u80c1\u68c0\u6d4b\u548c\u54cd\u5e94\u80fd\u529b\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u533a\u5757\u94fe\u5b89\u5168<\/strong>\uff1a\u63a2\u7d22\u4f7f\u7528\u533a\u5757\u94fe\u5728\u56fd\u9632\u4f9b\u5e94\u94fe\u4e2d\u8fdb\u884c\u5b89\u5168\u6570\u636e\u5171\u4eab\u548c\u9a8c\u8bc1\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u91cf\u5b50\u5b89\u5168\u5bc6\u7801\u5b66<\/strong>\uff1a\u91c7\u7528\u91cf\u5b50\u5b89\u5168\u5bc6\u7801\u7b97\u6cd5\uff0c\u4e3a\u91cf\u5b50\u8ba1\u7b97\u65f6\u4ee3\u505a\u597d\u51c6\u5907\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u5982\u4f55\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6216\u5982\u4f55\u5c06\u4ee3\u7406\u670d\u52a1\u5668\u4e0e\u7f51\u7edc\u5b89\u5168\u6210\u719f\u5ea6\u6a21\u578b\u8ba4\u8bc1\u76f8\u5173\u8054<\/h2>\n<p>\u4ee3\u7406\u670d\u52a1\u5668\u5728\u589e\u5f3a\u7f51\u7edc\u5b89\u5168\u65b9\u9762\u53d1\u6325\u7740\u81f3\u5173\u91cd\u8981\u7684\u4f5c\u7528\uff0c\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u65b9\u5f0f\u4e0e CMMC \u5173\u8054\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u589e\u5f3a\u533f\u540d\u6027<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u63d0\u4f9b\u989d\u5916\u7684\u533f\u540d\u5c42\uff0c\u964d\u4f4e\u5c06\u654f\u611f\u4fe1\u606f\u66b4\u9732\u7ed9\u6076\u610f\u884c\u4e3a\u8005\u7684\u98ce\u9669\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6d41\u91cf\u8fc7\u6ee4<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u8fc7\u6ee4\u548c\u963b\u6b62\u53ef\u7591\u6d41\u91cf\uff0c\u9632\u6b62\u6f5c\u5728\u7684\u7f51\u7edc\u5a01\u80c1\u5230\u8fbe\u7ec4\u7ec7\u7f51\u7edc\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u8bbf\u95ee\u63a7\u5236<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u5e2e\u52a9\u5b9e\u65bd\u8bbf\u95ee\u63a7\u5236\uff0c\u786e\u4fdd\u53ea\u6709\u6388\u6743\u7684\u4e2a\u4eba\u624d\u80fd\u8bbf\u95ee\u67d0\u4e9b\u8d44\u6e90\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u76f8\u5173\u94fe\u63a5<\/h2>\n<p>\u6709\u5173\u7f51\u7edc\u5b89\u5168\u6210\u719f\u5ea6\u6a21\u578b\u8ba4\u8bc1\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u8bbf\u95ee\u4ee5\u4e0b\u8d44\u6e90\uff1a<\/p>\n<ul>\n<li>CMMC\u5b98\u65b9\u7f51\u7ad9\uff1a <a href=\"https:\/\/www.acq.osd.mil\/cmmc\/\" target=\"_new\" rel=\"noopener nofollow\">https:\/\/www.acq.osd.mil\/cmmc\/<\/a><\/li>\n<li>CMMC\u8ba4\u8bc1\u673a\u6784\uff1a <a href=\"https:\/\/www.cmmcab.org\/\" target=\"_new\" rel=\"noopener nofollow\">https:\/\/www.cmmcab.org\/<\/a><\/li>\n<li>NIST \u7f51\u7edc\u5b89\u5168\u6846\u67b6\uff1a <a href=\"https:\/\/www.nist.gov\/cyberframework\" target=\"_new\" rel=\"noopener nofollow\">https:\/\/www.nist.gov\/cyberframework<\/a><\/li>\n<\/ul>\n<p><em>\u8bf7\u6ce8\u610f\uff0c\u672c\u6587\u4e2d\u63d0\u4f9b\u7684\u4fe1\u606f\u622a\u81f3 2021 \u5e74 9 \u6708\u662f\u51c6\u786e\u7684\uff0c\u9f13\u52b1\u8bfb\u8005\u53c2\u8003\u63d0\u4f9b\u7684\u94fe\u63a5\u4ee5\u83b7\u53d6\u6700\u65b0\u66f4\u65b0\u3002<\/em><\/p>","protected":false},"featured_media":476566,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476565","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Cybersecurity Maturity Model Certification: Strengthening Digital Defense<\/mark>","faq_items":[{"question":"What is Cybersecurity Maturity Model Certification (CMMC)?","answer":"<p>Cybersecurity Maturity Model Certification (CMMC) is a comprehensive framework developed by the U.S. Department of Defense (DoD) to enhance the cybersecurity posture of companies in the defense industrial base (DIB) sector. It aims to protect sensitive government data and information shared with contractors and subcontractors, ensuring a robust cybersecurity infrastructure across the supply chain.<\/p>"},{"question":"How did CMMC originate, and when was it first mentioned?","answer":"<p>The idea of CMMC can be traced back to the 2018 National Defense Authorization Act (NDAA) when concerns about safeguarding sensitive data arose. The first public mention of CMMC was in 2019 by the DoD as part of its efforts to mitigate cyber risks and protect vital information.<\/p>"},{"question":"What does the CMMC framework entail, and how does it work?","answer":"<p>The CMMC model comprises five levels, each representing a higher degree of cybersecurity maturity. It ranges from basic cyber hygiene practices to advanced security capabilities. Organizations must demonstrate adherence to specific practices and processes assessed through audits conducted by certified third-party assessors (C3PAOs).<\/p>"},{"question":"What are the key features of CMMC?","answer":"<p>CMMC's key features include graduated levels, third-party assessment, tailored certification, and ongoing monitoring. It offers a tiered approach to cybersecurity, ensuring credible and continuous evaluation by independent assessors.<\/p>"},{"question":"What are the different levels of Cybersecurity Maturity Model Certification?","answer":"<p>CMMC has five levels:<\/p><ol><li>Level 1: Basic Cyber Hygiene - Protecting Federal Contract Information (FCI).<\/li><li>Level 2: Intermediate Cyber Hygiene - Transition step toward protecting Controlled Unclassified Information (CUI).<\/li><li>Level 3: Good Cyber Hygiene - Protecting Controlled Unclassified Information (CUI).<\/li><li>Level 4: Proactive - Advanced protection of CUI and reducing risks of Advanced Persistent Threats (APTs).<\/li><li>Level 5: Advanced\/Progressive - Protecting CUI and handling APTs.<\/li><\/ol>"},{"question":"How can CMMC be used, and what problems might arise during implementation?","answer":"<p>CMMC is used to ensure organizations' eligibility for DoD contracts and to secure the defense supply chain. Challenges during implementation may include difficulties in adhering to all required practices, resource intensiveness, and the availability of certified assessors.<\/p>"},{"question":"How does CMMC compare to similar terms like NIST CSF and ISO 27001?","answer":"<p>CMMC is more prescriptive and requires certification, whereas NIST CSF is voluntary and follows a risk-based approach. Additionally, CMMC is specific to the defense industry, while ISO 27001 is broader in its application.<\/p>"},{"question":"What are the future perspectives and technologies related to CMMC?","answer":"<p>The future of CMMC may involve AI-driven cybersecurity, blockchain security, and quantum-safe cryptography to counter evolving cyber threats.<\/p>"},{"question":"How are proxy servers associated with Cybersecurity Maturity Model Certification?","answer":"<p>Proxy servers play a crucial role in enhancing cybersecurity by providing enhanced anonymity, traffic filtering, and access control, which can align with the objectives of CMMC.<\/p><p><strong>Please note that the information provided in this FAQ is accurate as of September 2021, and readers are encouraged to refer to the provided links for the most current updates.<\/strong><\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/476565","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/476565\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media\/476566"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media?parent=476565"}],"curies":[{"name":"\u53ef\u6e7f\u6027\u7c89\u5242","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}