CMMC 2.0 has three levels ranging from Foundational to Expert. Your required level depends on whether you handle Federal Contract Information (FCI) or Controlled Unclassified Information (CUI): Level 1 (Foundational): FCI only, Level 2 (Advanced): CUI (aligned to NIST SP 800-171), Level 3 (Expert): CUI with enhanced protections.

Learn more about the CMMC Certification Levels.

Download CMMC Level 2
Shared Responsibility Matrix (SRM)

CMMC Level 2
Readiness Assessment