What you'll learn

Defense contractors and subcontractors who handle Controlled Unclassified Information (CUI) must achieve CMMC Level 2 certification to remain eligible for DoD contracts. Translating 110 NIST 800-171 requirements into an assessment-ready program is where most organizations stall. In this course, Security Compliance: CMMC Level 2, you'll gain the ability to plan, implement, and sustain a CMMC Level 2 program from scoping through certification. First, you'll explore the structure of CMMC Level 2, the role of CUI under DFARS 252.204-7012, and the boundary of the 110 security requirements across the 14 control families. Next, you'll discover how to build a System Security Plan and a Plan of Action and Milestones (POA&M), score your posture against the Supplier Performance Risk System (SPRS) methodology, and operate continuous monitoring between assessments. Finally, you'll learn how to engage a Certified Third-Party Assessment Organization (C3PAO), prepare evidence packages, manage the triennial assessment lifecycle, and respond to findings. When you're finished with this course, you'll have the skills and knowledge of CMMC Level 2 needed to lead your organization through scoping, implementation, certification, and ongoing compliance.