The Cybersecurity Maturity Model Certification 2.0 program marks a shift from self-certification to third-party assessments.