The Department of Defense plans to roll out the Cybersecurity Maturity Model Certification program in four phases over three years.