What are CMMC levels?

CMMC 2.0 has three levels ranging from Foundational to Expert. Your required level depends on whether you handle Federal Contract Information (FCI) or Controlled Unclassified Information (CUI): Level 1 (Foundational): FCI only, Level 2 (Advanced): CUI (aligned to NIST SP 800-171), Level 3 (Expert): CUI with enhanced protections. Learn more about the CMMC Certification Levels.

Download CMMC Level 2
Shared Responsibility Matrix (SRM)

CMMC Level 2
Readiness Assessment