What Changed In This Release
- Redid the mapping in the CDPP and CSOP to clearly identify the applicable CMMC practices and processes and the NIST 800-171 CUI and NFO controls.
- Redid the pre-assessment criteria to include NIST 800-171 and CMMC expectations and possible methods to comply.
- Added content to the SSP template: CMMC practice numbers, CUI data classification, and mapping to the policies, standards and procedures in Annex 1.
- Added a Vendor Compliance Program (VCP) document as a template for establishing a Cybersecurity Supply Chain Risk Management Program (C-SCRMP).
- Separated the POA&M template into its own document.
- Corrected NFO mapping in the Excel mapping spreadsheet (CA-3(5) to SC-07 and CA-7(1) to CG-05).
- Updated the CUI scoping guidance document.
Did You Purchase An Older Version Of This Product?
Releases from before 2024 are significantly out of date. Existing customers are encouraged to repurchase the current version at 50% of the original product price.