OMB control number
Cybersecurity Maturity Model Certification (CMMC) Program Reporting and Recordkeeping Requirements Information Collection
OMB 0704-0677 · DOD/DODDEP.
OMB 0704-0677
This information collection supports the implementation of the CMMC program as defined in DOD’s final rule published on October 15, 2024 (89 FR 83092). Specifically, this collection describes recordkeeping requirements such as records developed in the process of accrediting Third-Party Assessment Organizations (C3PAOs) and CMMC Accreditation Body plans. These requirements support the implementation of the CMMC assessment process for Levels 2 and 3 certification assessments.
The latest form for Cybersecurity Maturity Model Certification (CMMC) Program Reporting and Recordkeeping Requirements Information Collection expires 2027-10-31 and is listed under ICR 202405-0704-002.
Latest Forms, Documents, and Supporting Material
| Document | Type |
|---|---|
 0704-0677_PRA_Public_Comment_responses_7.8.2024.pdf | Supplementary Document |
| MFR for Supplier Performance Risk System (SPRS)_(F).pdf | Supplementary Document |
 CMMC Program SSA_0704-0677_10.18.2024.docx | Supporting Statement A |
 Level 3 Certification Assessments |
Information collection |
| Level 2 Certification Assessments |
Information collection |
All Historical Document Collections
| Reference | Filing | Received | Concluded | Action |
|---|---|---|---|---|
| 202405-0704-002 | New collection (Request for a new OMB Control Number) | 2024-06-25 | ||
| 202211-0704-001 | New collection (Request for a new OMB Control Number) | 2023-11-16 | Comment filed on proposed rule |
OMB Details
Level 2 Certification Assessments
Federal Enterprise Architecture: Defense and National Security - Operational Defense