liveBook · Manning

Cybersecurity Maturity Model Certification

As explained in Cyber Threat Hunting

Cybersecurity Maturity Model Certification is a cybersecurity assessment and certification standard that evaluates organizational maturity through defined security practices and processes.

Cybersecurity Maturity Model Certification (CMMC) measures an organization’s maturity in protecting unclassified information through defined cybersecurity practices and processes. It maps these practices to five maturity levels and can apply beyond its primary US defense audience. section 2.7.2

CMMC connects maturity assessment with threat-hunting capability:

  • The Situational Awareness domain includes the Implement Threat Monitoring capacity. section 2.7.2
  • Practice SA.4.171 requires level 4-or-higher organizations to establish and maintain cyber threat hunting. section 2.7.2
  • The capability searches for indicators of compromise and detects, tracks, and disrupts threats that evade existing controls. section 2.7.2

A signal for proactive hunting

A cyber-hunt team notices that nighttime bandwidth consumption has spiked for several weeks and treats the pattern as a possible sign of an adversary. section 2.7.2

How Cyber Threat Hunting covers it

How deep it goes
Defines five maturity levels and specifies a level-four practice, but does not detail the complete certification process.
Examples
Uses recurring nighttime bandwidth spikes as a possible indicator of adversary activity.
What you can do after
Evaluate organizational maturity and identify when threat hunting becomes a required capability.
How it connects
Connects threat hunting, situational awareness, implement threat monitoring, and NIST SP 800-53 Rev. 5.
Cover of Cyber Threat Hunting
liveBookmanning.com
Read Cyber Threat Hunting on liveBook Get the book at manning.com

This explainer was generated by Manning's knowledge graph from the text of Cyber Threat Hunting. The section links point to the parts of the book it draws on.