CMMC

On Demand

Foundational

Captiva Created

Lesson

NIST 800-171r3 Datasheet 

CMMC Acronyms  

CMMC References

NIST 800 - 171 - Revision 3

This course provides a detailed analysis of the relationship between the Cybersecurity Maturity Model Certification (CMMC) framework and NIST SP 800-171, with a specific focus on the changes introduced in Revision 3. Participants explore the purpose of NIST SP 800-171 in safeguarding Controlled Unclassified Information (CUI) within nonfederal systems and organizations and how these requirements align with contractual obligations under DFARS, particularly DFARS 252.204-7012.The course examines the evolution of NIST SP 800-171 from Revision 2 to Revision 3, highlighting significant updates such as new control domains, revised control structures, updated numbering formats, changes to organization-defined parameters (ODPs), and the introduction of new security requirements. Learners gain insight into how these revisions impact control implementation, assessment procedures under NIST SP 800-171A, and future CMMC assessment expectations. Special emphasis is placed on understanding control tailoring, Other Related Controls (ORCs), and how assessment procedures are structured to support audit consistency and automation.Through practical examples and knowledge checks, the course helps participants interpret how revised controls translate into real-world cybersecurity practices, documentation, and evidence. It also addresses strategic considerations for defense contractors, including why CMMC assessments are expected to continue using NIST SP 800-171 Revision 2 in the near term, how organizations should prepare for the transition to Revision 3, and the potential cost and resource impacts of adopting the expanded control set.By the end of this module, learners will have a clear understanding of the differences between CMMC and NIST SP 800-171 Revision 3, how those differences affect compliance planning and assessments, and how to position their organization for long-term compliance while managing risk, cost, and operational impact within the defense industrial base.

This module compares CMMC requirements with NIST SP 800-171 Revision 3, highlighting key changes, new control domains, assessment impacts, and what defense contractors need to know to prepare for future CMMC and compliance transitions.

CMMC vs. NIST 800 -171 - Revision 3

Chichi Onwudiwe

Language

Level

Duration

Course content

Course Description

This Course Includes