Extended CMMC documentation library.

32 CFR 117 National Industrial Security Program Operating Manual\_NISPOM

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

32 CFR 2002 Controlled Unclassified Information

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

32 CFR 2002 Controlled Unclassified Information: Final Rule

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

44 USC Chapter 33

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

44 USC Chapter 35

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

48 CFR

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

A Guide to the Rulemaking Process

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Assessing Contractor Implementation of Cybersecurity Requirements

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Strategically Implementing Cybersecurity Contract Clauses

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Atomic Energy Act of 1954

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Australia Essential Eight Maturity Model

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

AWS CMMC Customer Responsibility Matrix

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

AWS Configuration Guide CMMC All Levels

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

C3PAO Pre-Assessment Package

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

CERT Resilience Management Model 1.2

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

CIS Controls Version 7.1

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Clarifying Guidance for Marking and Handling Controlled Technical Information IAM DODI 5200.48

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

CMMC 1.02 Model Excel\_Modified

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

CMMC 2.0 Model Excel\_Modified

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

CMMC Final Rule: 32 CFR Part 170

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

CMMC Self-Assessment Tool: 

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Committee on National Security Systems Instruction (CNSSI) 1253: 

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Committee on National Security Systems Instruction (CNSSI) 4009: 

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Contractor Purchasing System Review (CPSR) Guidebook (Appendix 24):

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Contractual Remedies to Ensure Contractor Compliance with Defense Federal Acquisition Regulation Supplement Clause 252.204-7012

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

CUI FAQ

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

CUI SSP Template

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Cybersecurity Maturity Model Certification (CMMC) 2.0 Updates and Way Forward

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DARS 2018-0023-001: 

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DARS 2018-0023-002 Attachment 1:

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DARS-2018-0023-0002 Content:

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DCMA DIBCAC Assessment Documentation Package:

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Defense Counterintelligence and Security Agency Assessment and Authorization Process Manual

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Defense Industrial Base (DIB) Cybersecurity Strategy 2024

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DFARS 252.204-7008 Compliance with Safeguarding Covered Defense Information Controls

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DFARS 252.204-7009 Limitations on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DFARS 252.204-7012 Flowdown to International Suppliers

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DFARS 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DFARS 252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DFARS 252.204-7020 NIST SP 800-171 DoD Assessment Requirements

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DFARS 252.204-7021 Cybersecurity Maturity Model Certification Requirement

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DFARS 252.204-7024 Notice on the Use of the Supplier Performance Risk System

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

 SPRS Evaluation Criteria

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DFARS 252.227-7013 Rights in Technical Data—Noncommercial Items

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DFARS 252.239-7010 Cloud Computing Services

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DFARS Case 2019-D041 Interim Rule Memorandum

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DFARS Case 2019-D041 Interim Rule

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DFARS CMMC 2.0 Advanced Notice of Proposed Rulemaking

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DFARS Cyber FAQs

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DFARS Safeguarding CDI\_One Pager Basics

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DFARS Subparts 201-225

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DFARS Subparts 226-251

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DFARS Subparts 252-Appendix I

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DIB Cybersecurity Activities Placemat

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Career Pathway: Security Control Assessor 612

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD CIO Use of Non-Government Owned Mobile Devices

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD CISO Special Session Town Hall

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Cloud Computing Security Requirements Guide (SRG)

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Cybersecurity Maturity Model Certification (CMMC) Frequently Asked Questions (FAQs) Revision 2.3 (Excerpt)

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DFARS Cyber FAQs

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD CUI Marking Guide

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD CUI (CDI) Registry

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Defense Industrial Base (DB) Cybersecurity (CS) Activities: Proposed Rule

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Directive 5230.09

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Inspector General’s Audit of the DoD’s Implementation and Oversight of the Controlled Unclassified Information (CUI) Program

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Instruction 5015.02

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Instruction 5200.01

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Instruction 5200.48

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Instruction 5210.01

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Instruction 5230.09

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Instruction 5230.24

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Instruction 5230.24

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Instruction 5230.29

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Instruction 5400.04

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Instruction 8500.01

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Instruction 8510.01

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Instruction 8582.01

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Manual 5200.01 Volume 1

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Manual 5200.01 Volume 2

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Manual 5200.01 Volume 3

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Manual 5400.07

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Manual 8140.03 Cyberspace Workforce Qualification and Management Program

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD OCONUS Cloud Strategy Department of Defense Outside the Continental United States Cloud Strategy

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DoD Revised Policy on Sharing CUI with Foreign Entities 

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Executive Order 13526

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Executive Order 13556

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

False Claims Act

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

FAR 4.1901 

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

FAR 52.204-21

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

48 CFR 52.204-21

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Federal Risk and Authorization Management Program Moderate Equivalency for Cloud Service Provider's Cloud Service Offerings

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

FedRAMP Low or Moderate Control Implementation Summary/Customer Responsibility Matrix (CIS/CRM)

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

FedRAMP High Control Implementation Summary/Customer Responsibility Matrix (CIS/CRM)

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

FedRAMP Security Controls Baseline

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

FedRAMP SSP Moderate Baseline Template

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

FIPS 140-1

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

FIPS 140-2

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

FIPS 140-3

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

FIPS 199

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

FIPS 200

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

FISMA Act of 2002

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

FISMA Act of 2014

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

FISMA Act of 2021

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

FISMA Act of 2022

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

FY22 FISMA CIO Metrics

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Contractor’s Record of Tier 1 Level Suppliers Receiving/Developing Covered Defense)

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

DI-MGMT-82247

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Implementing the CMMC Program: Guidance for Detem1ining Appropriate CMMC Compliance Assessment Levels

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Intelligence Community Directive 710

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Intelligence Community Policy Guidance 403.1

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Introduction to the Risk Management Framework

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Microsoft Technical Reference Guide for CMMC v2

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NARA CUI Categories Not in DoD CUI Registry

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NARA CUI Marking Handbook

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NARA CUI REL TO Country Trigraphs

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NARA ISOO CUI Notice 2019-03

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NARA ISOO CUI Notice 2020-02: Alternate Marking Methods

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NARA ISOO CUI Notice 2020-04

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST CSF

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST Handbook 162

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 500-292 NIST Cloud Computing Reference Architecture

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-171 Implementation Approach

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-171 DOD Assessment Methodology

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST.IR.7621r1

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-16

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-18

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-30r1

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-37r2

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-39

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-40r4

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-41r1

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-50

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-53Ar5

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-53B

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-53r5

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-60v1r1 Volume I

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-63-3

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-70r4

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-88r1

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-111

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-124r1

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-125B

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-128

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST 800-161r1

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-171 Assessment Methodology

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-171Ar2

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-171Ar3

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-171r2

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-171r3

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-171r3 Organizationally Defined Parameters (ODP)

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-172

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-172A

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NIST SP 800-218

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

NMCARS Annex 16

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Office of Management and Budget (OMB) Circular A-130: 

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Realignment of Responsibility for CMMC

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

Risk Management Framework Glossary

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

State Of Competition Within the Defense Industrial Base

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

UK Cyber Essentials Booklet

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

UK Cyber Essentials Plus Illustrative Test Specification

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.

UK Cyber Essentials Requirements for IT Infrastructure

Open the supplied reference. Verify publisher, revision, currency and applicability before relying on it.