The U.S. Department of Defense (DoD) plans to implement Cybersecurity Maturity Model Certification (CMMC) 2.0 by mid-2025. This certification is mandatory for all defense contractors – and subcontractors – including those using any cloud service provider to store and transmit critical defense information in line with their defense contracts.

CMMC is a unified framework used to implement cybersecurity across the defense industrial base. This framework ensures that all organizations seeking the certification need to securely store, process, and transmit any controlled unclassified information and federal contract information.