The NIST 800-171 Compliance Program (NCP) is ComplianceForge’s editable documentation package for organizations that need to implement and evidence NIST SP 800-171 requirements for Controlled Unclassified Information (CUI).
The NCP should help contractors document policies, standards, procedures, a System Security Plan (SSP), Plan of Action and Milestones (POA&M) items and other evidence needed to support NIST 800-171 and CMMC readiness. As of 2026, CMMC assessments continue to use NIST SP 800-171 Revision 2 until DoD incorporates Revision 3 through future rulemaking.
