DFARS & CMMC Resource Center

DFARS (Defense Federal Acquisition Regulation Supplement) is a set of regulations that govern Department of Defense contracts, including cybersecurity requirements that mandate contractors protect Controlled Unclassified Information (CUI) by implementing specific security controls.

CMMC (Cybersecurity Maturity Model Certification) is the DoD's tiered certification framework that verifies defense contractors have implemented required cybersecurity practices—ranging from basic cyber hygiene at Level 1 to advanced protection of CUI at Level 2 and above—before they can bid on or perform contract work.