The Department of Defense is drafting a new 5 Level Cybersecurity Maturity Model Certification standard that replaces NIST 800-171 in mid-2020, each with a set of supporting practices and processes.
Level 1: Basic Cybersecurity
Level 2: Includes Universally accepted cybersecurity best practices
Level 3: Covers all NIST 800-171 rev 1 Controls
Level 4: Advanced Cybersecurity Practices
Level 5: Highly Advanced Cybersecurity Practices
Every organization that does business with the Department of Defense must undergo an audit by an authorized auditing entity and achieve Level 3 maturity before bidding on a contract or subcontracting to a prime. IT-AAC assists federal agencies as well as organizations doing business with the Department of Defense in assessing and maturing their capabilities in cyber security practices and processes across eighteen security domains, enabling them in making informed business decisions and sustaining effectiveness in the design, operation, and monitoring of their cyber risk management programs. Find out more at https://www.it-aac.org
| 06-22-2020 | Download |
IT-AAC Overview 2020