The Cybersecurity Maturity Model Certification (CMMC) is a Department of Defense framework designed to ensure contractors protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). It establishes a standardized set of cybersecurity practices and processes that organizations must implement to do business with the DoD. CMMC focuses on safeguarding sensitive data across the defense supply chain by requiring verified compliance rather than self-attestation. The model helps reduce cybersecurity risk by ensuring contractors meet consistent and measurable security requirements.