NIST 800-171 Update For 32 CFR Part 170

The 2024.3 version of the NIST 800-171 Compliance Program (NCP) addresses changes associated with 32 CFR Part 170 and updated CMMC 2.0 L2 scoping guidance.

The biggest issue with 32 CFR Part 170 is the DoD cites NIST SP 800-171 R2 in this final rule, even though NIST SP 800-171 R3 was released earlier this year and per OMB NIST 800-171 R2 will be considered a deprecated standard in May 2025. The DoD’s reason for focusing on the old version of NIST SP 800-171 includes the time needed:

• For industry preparation to implement; and
• To prepare the CMMC ecosystem to perform assessments against the new version.

Given this DoD's focus on NIST SP 800-171 R2 for the immediate future, ComplianceForge reorganized the NCP into three different formats to meet client needs:

• NCP R2 is tailored for organizations that want to focus entirely on only NIST SP 800-171 R2.
• NCP R3 is tailored for organizations that want to focus entirely on only NIST SP 800-171 R3.
• NCP Combined R2 & R3 is tailored for organizations that want to address both NIST SP 800-171 R2 & R3 simultaneously.

Learn more at: https://complianceforge.com/product/nist-800-171-compliance-program/