Cybersecurity Maturity Model Certification (CMMC) Compliance

   CMMC Controls Crosswalk   

We put together the following NIST 800-171 & CMMC compliance crosswalk mapping to help people understand how CMMC maps to leading frameworks to better address NIST 800-171 controls and prepare for a CMMC audit. 

   NIST 800-171 & CMMC Controls Mapping   

The NIST 800-171 & CMMC compliance crosswalk mapping provides mapping between CMMC controls and:

• FAR 52.204-21

• NIST 800-171 rev1

• NIST 800-53 rev4

• CERT Resilience Management Model (RMM) v1.2

• ISO 27002:2013

• NIST Cybersecurity Framework (NIST CSF) v1.1

• CIS Critical Security Controls (CSC) v7.1

• Secure Controls Framework (SCF)

​

There is also mapping to the following ComplianceForge products to demonstrate coverage for NIST 800-171 and CMMC with the following cybersecurity policies and standards:

• NIST 800-171 Compliance Program (NCP)

• NIST 800-53 Written Information Security Program (WISP)

• Digital Security Program (DSP)

​

​