OMB control number

Cybersecurity Maturity Model Certification (CMMC) Program Reporting and Recordkeeping Requirements Information Collection

OMB 0704-0677 · DOD/DODDEP.

OMB 0704-0677

This information collection supports the implementation of the CMMC program as defined in DOD’s final rule published on October 15, 2024 (89 FR 83092). Specifically, this collection describes recordkeeping requirements such as records developed in the process of accrediting Third-Party Assessment Organizations (C3PAOs) and CMMC Accreditation Body plans. These requirements support the implementation of the CMMC assessment process for Levels 2 and 3 certification assessments.

The latest form for Cybersecurity Maturity Model Certification (CMMC) Program Reporting and Recordkeeping Requirements Information Collection expires 2027-10-31 and can be found here.

OMB Details

Level 2 Certification Assessments

Federal Enterprise Architecture: Defense and National Security - Operational Defense