Nine Things to Know About the CMMC

**Executive Summary:** This TrustedSec guidance explains the Cybersecurity Maturity Model Certification (CMMC) purpose, rollout timeline, certification levels (including requirements for FCI and CUI), key program rules (no POAMs, separation of consultants and assessors, three-year recertification), and practical recommendations such as data isolation and minimization to help Defense Industrial Base organizations prepare for compliance.