The Department of Defense's Cybersecurity requirements are set out in the Cybersecurity Maturity Model Certification (CMMC). The CMMC defines five levels of cybersecurity maturity, with each level representing increasingly stringent security requirements.