The Cybersecurity Maturity Model Certification (CMMC) is a unified security standard and a certification process developed by the U.S. Department of Defense (DoD) to significantly enhance cybersecurity across the Defense Industrial Base (DIB). The recent spate of data breaches affecting both government and commercial organizations underscores the need for more robust security measures to protect critical information. For DoD this means increased protection of Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) within the DIB supply chain. CMMC is a critical component of heightened security that will have a profound impact on DoD contracting, requiring all prime and sub-contractors doing business with the DoD to achieve a CMMC certification level as a prerequisite to new contract awards.

The CMMC framework requires organizations seeking certification to undergo a security assessment conducted by a CMMC Third-Party Assessment Organization (C3PAO), of which Kratos is one of only two companies authorized at this time. Kratos’ assessment process consists of four phases (Planning, Assessment, Results and Remediation) that are designed to provide organization seeking certification with the greatest opportunity for success. Kratos has years of robust experience in compliance and certification assessment, risk management and cyber operations, defense and engineering. Services include vulnerability assessments, enterprise security architecture design, application security testing and risk management processes.