Cybersecurity is a top priority for the Department of Defense: Its contractors and subcontractors in the Defense Industrial Base (DIB) are increasingly targets of frequent and complex cyberattacks. The DoD developed Cybersecurity Maturity Model Certification (CMMC) 2.0 as a dynamic certification program to enhance DIB cybersecurity posture. The program protects sensitive unclassified information shared by the Department with its contractors and subcontractors. 

By incorporating a set of cybersecurity requirements into acquisition programs, the CMMC program provides the DoD with increased assurance that contractors and subcontractors meet these requirements. This paper details how Saviynt’s identity & access governance platform helps customers gain and maintain compliance with the CMMC.