The Cybersecurity Maturity Model Certification (CMMC) is a U.S. Department of Defense standard designed to ensure cybersecurity across the defense industrial base. ICS systems used in defense applications must meet CMMC requirements to protect sensitive information.