What are 'Organization-Defined Parameters' in CMMC Level 1?
Last updated: 6/5/2025
Organization-Defined Parameters (ODPs) are values or settings that the organization itself determines for certain controls, such as frequency of log reviews or password change intervals, if not explicitly dictated by CMMC. Level 1 has fewer ODPs than higher levels but implies some organizational decisions (e.g. 'timely manner' for flaw remediation).