1. Home
  2. |Insights
  3. |Immaturity of the Cybersecurity Maturity Model: Revisions Omit Higher-Level Updates

Immaturity of the Cybersecurity Maturity Model: Revisions Omit Higher-Level Updates

Client Alert | 1 min read | 11.13.19

Last week, the Defense Department (DoD) released Revision 0.6 to the Cybersecurity Maturity Model Certification (CMMC). Notably absent were revisions to Levels 4 – 5, which DoD promises in the next public release. While the final version of the CMMC is due in late January, Revision 0.6 updated CMMC Levels 1 – 3 by:

  • Condensing the CMMC requirements;
  • Modifying the practices and processes; and
  • Providing clarifications and examples for CMMC Level 1 requirements.

Revision 0.6 also distilled the core requirements for Levels 1 – 3 into the following categories:

  • Level 1 -- Basic cyber hygiene: Implementation of security controls in FAR 52.204-21, Basic Safeguarding of Covered Contractor Information Systems;
  • Level 2 -- Intermediate cyber hygiene: Implementation of select NIST SP 800-171 controls; and
  • Level 3 -- Good cyber hygiene: Full implementation of NIST SP 800-171 controls.

Industry will benefit from reviewing this latest draft and preparing for DoD’s pending implementation of the CMMC.

Contacts

Insights

Client Alert | 3 min read | 02.27.26

EEOC v. Coca-Cola Beverages Northeast, Inc.: Another Step Focused on the EEOC’s Goal of Eradicating Unlawful DEI-Related Practices

On February 17, 2026, the U.S. Equal Employment Opportunity Commission (EEOC) filed a complaint against Coca-Cola Beverages Northeast, Inc., in the United States District Court for the District of New Hampshire, alleging that the company violated Title VII of the Civil Rights Act of 1964 (Title VII) by conducting an event limited to female employees. The EEOC’s lawsuit is one of several recent actions from the EEOC in furtherance of its efforts to end what it refers to as “unlawful DEI-motivated race and sex discrimination.” See EEOC and Justice Department Warn Against Unlawful DEI-Related Discrimination | U.S. Equal Employment Opportunity Commission....

View All Insights