By Isabelle Congdon

CMMC, a.k.a. the Cybersecurity Maturity Model Certification, is a security framework that is mandated by the Department of Defense. By updating your systems to be CMMC compliant, you can gain an edge over your competitors. You might be wondering: “How does my business become CMMC compliant?” Luckily, we are here to help. Here are just a few of the requirements to meet CMMC Level 1.

1. Set up individual system access. Make sure that every individual has their own password protected account to log in on. Create a comprehensive list of all devices that will be accessing your systems and keep this updated when people leave/enter your company.

2. Create an access hierarchy. Not every user should have full/unrestricted access. Employees should only have access to the information they actively need.

3. Create secure networks. Your business should have its own wireless network, and it should not be shared with anyone outside of your organization.

4. Your cloud data systems should not be publicly accessible. Cloud shared documents should be password protected and all publicly posted information should be reviewed for sensitive data before posting.

5. Change default passwords. Every time a new device is bought, the default passwords should be changed before any business is conducted on it. In addition, every device should automatically lock if not used after a short period of time.

6. Destroy sensitive data after use. There are several ways to do this, both digital and physical. Consult with your IT team to figure out the best option for your business.

While these are only a few of the requirements for Level 1, they can be your first steps toward total compliance. For a smooth journey towards full CMMC compliance, consult with a cybersecurity professional.