Cybersecurity Maturity Model Certification (CMMC) is a Department of Defense (DoD) cybersecurity compliance and certification service that includes an independent assessment of security personnel against NIST 800-171 security controls to protect classified information (CUI). The Defense Business Base (DBS) is also being targeted by hostile nations due to sensitive information in its alliance partners. CMMC enhances existing DFARS 252.204-7012 requirements to address access control and data protection to mitigate cyber threat risk.