CMMC is a cybersecurity framework created by the US DoD that establishes a minimum threshold level of cybersecurity that organizations entrusted with sensitive defense information must meet or exceed. CMMC was created to curtail the theft of controlled unclassified information (CUI) by adversaries of the United States.