CMMC Model 2.0
Model 2
Assessment
LEVEL 3
Expert
110+
practice based on
NIST SP 800-172
Triannual government led assessments
LEVEL 2
Advanced
110
practice based on
NIST SP 800-171
Triannual third-party assessments for critical national security information; Annual self-assessment for select programs
LEVEL 1
Foundational
17
practices
Annual self-assessment