DoD announces cybersecurity certification pilots December 16, 2020 The DoD released selected acquisitions to pilot the forthcoming CMMC. (Petty Officer 1st Class Luke Pinneo/U.S. Coast Guard) WASHINGTON — The Department of Defense has outlined what contracts will initially fall within its Cybersecurity Maturity Model Certification. The CMMC is a tiered cybersecurity framework that grades companies on a scale of one to five. A score of one designates basic cyber hygiene and a five represents advanced hygiene. Top officials at the DoD have said the process will not be retroactive, and as part of the rollout, it will seek to pilot contracts before all contracts will feature it going forward.