Abstract
The Cybersecurity Maturity Model Certification (CMMC) is a set of policies and practices that address the protection of federal Controlled Unclassified Information (CUI) data through administrative, physical, and technical controls. The loss of CUI from the Defense Industrial Base (DIB) has led to increased risk to the economy and to national security, and CMMC is critical to organizations that support or feed into the DIB, and this applies to colleges and universities that are performing Department of Defense contracts.