About CMMCpedia

Privacy and terms

CMMCpedia collects as little as it can, and its terms are short because the site is simple. This page says what the site collects and what the terms are.

Reading the site

CMMCpedia uses Google Analytics to count which pages are read. It sends Google the address of each page you open, without anything after a question mark in it, and nothing you type into a form. Google Analytics sets cookies whose names start with _ga to tell one visit from the next. Google's page on how it uses data from sites like this one covers what Google does with it. To stop it, block cookies for this site or install Google's opt-out add-on.

Cloudflare serves the site. Like any host, it keeps request logs at its edge and may set cookies of its own for security. Cloudflare's privacy policy covers that data.

If you switch between the light and dark theme, the choice is stored in your browser only. It never leaves your device and is not sent to the site.

The contact form

When you send a message through the Work with me page, the form collects your name, your email address, and the message you wrote. That is all it asks for.

The form sends your message to Arnold De La Vega as an email through an email delivery provider. Your name and address are in that email so he can reply. The site keeps no copy in a database and adds you to no list. The delivery provider keeps its own record of the email under its own retention policy. He uses your message to answer you and for nothing else.

What the site is

CMMCpedia is educational. It explains the Level 2 Requirements of CMMC, the Cybersecurity Maturity Model Certification, and gives one practitioner's guidance on meeting them. It is not legal advice. Reading it does not create a client relationship with the author or with Vivid Technical Consulting. For decisions that turn on your contract or your legal exposure, speak to a lawyer or to your contracting officer.

No certification promise

Following the guidance on this site does not mean you will pass an assessment or receive a certification. That outcome depends on your own system, your evidence, and your assessor. The site is provided as is, and the author is not liable for how you use it.

Who owns the text

Text quoted from U.S. government publications, including NIST publications and the CMMC assessment guides, is a work of the United States government. It is not protected by copyright in the United States. It is labeled Official Source Material and reproduced word for word. Everything else on the site, including all Practitioner Guidance, is written by Arnold De La Vega and belongs to him. You may quote it with attribution and a link to the page. Do not republish whole pages.

Changes

This page may change as the site grows. The version on this page is the one that applies.

Questions

Send them through the contact form.