Cybersecurity Maturity Model Certification (CMMC) Enterprise Mission Assurance Support-Service (eMASS) Instantiation Information Collection

This collection supports DOD’s program rule for the Cybersecurity Maturity Model Certification (CMMC). The collection, called eMASS, is the electronic mechanism for collecting data such as pre-assessment and planning materials, contact information, artifact information (list of artifacts, hash of artifacts, and hashing algorithm used), final assessment reports, CMMC certificates of assessment, and assessment appeal information. This information collection will provide the visibility necessary to support and monitor the implementation of CMMC program.

The latest form for Cybersecurity Maturity Model Certification (CMMC) Enterprise Mission Assurance Support-Service (eMASS) Instantiation Information Collection expires 2027-10-31 and can be found here.

Accreditation Body submission of C3PAO information in eMASS

Federal Enterprise Architecture: Defense and National Security - Operational Defense