A complete and current resource for defense contractors and their counsel: the rules, all 110 Level 2 controls, the assessment process, and a clear path from where you are today to a passing score.
What CMMC is, the three levels, the rules, the phase-in, and how a contract triggers a requirement.
Part IICUI and FCI, scope and asset categories, the SPRS score, the plan of action rules, and the SSP.
Part IIIEvery Level 2 requirement, by family, each opening to a full entry.
Part IVThe three phases, adequacy and sufficiency, scoring, and the closeout.
Part VThe ecosystem of roles and organizations, and a working glossary of the terms.
In depthWhat happens to work awarded before the Level 2 requirement existed.
In depthThe misconceptions and questions that recur most in readiness conversations.
OngoingA running log of CMMC developments, linked back to what each affects.
Implementation follows a consistent order. Each step below links to the part of the guide that treats it in full, so a company can work from where it is toward an assessment it can pass.
Find where CUI actually lives, sort the assets into their categories, and draw the boundary that will be assessed.
Core Concepts →Document the scope and state, requirement by requirement, how each control is met, by whom, and with what.
Core Concepts →Implement what the 110 requirements ask, closing the difference between the standard and the environment.
The 110 Controls →Gather the documents, configurations, and records an assessor will examine, interview against, and test.
The Assessment →Complete a self-assessment where the contract permits one, or a C3PAO certification assessment where it requires it.
The Assessment →Affirm continuous compliance each year, keep the SSP current, and reassess on the three-year cycle.
Core Concepts →The CMMC Guide is a working reference for the version of CMMC that is now in force, written from onsite practice for the people who have to act on it. It favors accuracy and currency over persuasion, every page carries an edition and a last-reviewed date, and the guide is revised as the program changes. This is Edition 2026.1, last reviewed July 12, 2026.