CMMC (Cybersecurity Maturity Model Certification) is a model cybersecurity process managed and controlled by the Department of Defense (DoD). Business bidding for and delivering DoD contracts with controlled unclassified information (CUI) require certification under CMMC 2.0. for and delivering DoD contracts require certification under CMMC 2.0.