CMMC Levels 1-3: Going Beyond NIST SP-171
Software Engineering Institute
The Cybersecurity Maturity Model Certification (CMMC) 1.0 defines specific cybersecurity practices across five levels of maturity while also measuring the degree to which those practices are institutionalized within an organization. In this SEI Podcast, Andrew Hoover and Katie Stewart, CMMC architects, discuss Levels 1-3 of the model and what steps organizations need to take to move beyond NIST 800-171.
About the Speaker
Andrew Hoover is an SEI alumni employee.
Andrew Hoover is a senior engineer and the team lead of the Resilience Engineering Team in the CERT Division of Carnegie Mellon University’s Software Engineering Institute. In this role, Hoover focuses on cybersecurity architecture, cyber resilience, critical infrastructure protection, and teaches the CERT …Read more
Part of a Collection
Cybersecurity Maturity Model Certification 1.0 (CMMC 1.0)
Cybersecurity Maturity Model Certification Podcast Collection 1.0 (CMMC 1.0)
2019 SEI Year in Review Resources
This content was created for a conference series or symposium and does not necessarily reflect the positions and views of the Software Engineering Institute.