Foundations
Understand the CMMC model before memorizing its terms
Learn how information, requirements, implementation, assessment and continuing responsibility connect.
5 min readUnderstand the systems.
Follow information through the environment, connect safeguards to the work, and learn how to explain the evidence behind an implementation.
09connected lessons
45minutes of reading, plus reflection
THE LEARNING GOAL
A stronger conceptual link between information flows, scope, safeguards, and supporting records.
Your progress0 / 9 lessons
Saved only in this browser. Completion is self-reported learning progress.Information & scope
Tell FCI, CUI and ordinary business information apart
Learn the questions that matter when information labels are unclear, without guessing from a file name or customer logo.
5 min readInformation & scope
Follow information through its whole lifecycle
See how receiving, creating, using, sharing, storing and disposing of information create different protection questions.
5 min readInformation & scope
Understand what an assessment boundary describes
Learn to distinguish an organizational chart, a network picture and the actual environment relevant to an assessment.
5 min readInformation & scope
Learn how assets and external services fit into the environment
Move beyond a device list to understand applications, security functions, providers and shared responsibilities.
5 min readSafeguards & evidence
Learn the building blocks of access control
Understand identity, authentication, authorization and the lifecycle of access through a practical workspace example.
5 min readSafeguards & evidence
Understand baselines, changes and configuration drift
Learn how an approved system description stays connected to the way the system actually operates.
5 min readSafeguards & evidence
Prepare people to recognize and route a security concern
Learn how roles, communication, evidence preservation and practice support an organization’s incident response capability.
5 min readSafeguards & evidence
Learn the difference between examine, interview and test
Use three assessment methods to investigate a safeguard from complementary perspectives.
5 min read