Cybersecurity Maturity Model Certification (CMMC) Compliance

   CMMC Controls Crosswalk   

We put together the following NIST SP 800-171 & CMMC compliance crosswalk mapping to help people understand how CMMC v1.02 maps to leading frameworks to better address NIST SP 800-171 rev2 controls and prepare for a CMMC audit. This is available as part of the CMMC Center of Awesomeness (CMMC-COA).

   NIST SP 800-171 & CMMC Controls Mapping   

The NIST SP 800-171 & CMMC compliance crosswalk mapping provides mapping between CMMC controls and:

• FAR 52.204-21

• NIST 800-171 rev2

• NIST 800-53 rev5

• CERT Resilience Management Model (RMM) v1.2

• ISO 27002:2013

• NIST Cybersecurity Framework (NIST CSF) v1.1

• CIS Critical Security Controls (CSC) v7.1

• Secure Controls Framework (SCF)

​

There is also mapping to the following ComplianceForge products to demonstrate coverage for NIST SP 800-171 and CMMC with the following cybersecurity policies and standards:

• NIST 800-171 Compliance Program (NCP)

• NIST 800-53 Written Information Security Program (WISP)

• Digital Security Program (DSP)

​

​