Introduction
0/1
Types of Information
Learn about the types of information that are pertinent to NIST 800-171 and CMMC.
0/5
NIST 800-171 Overview
Learn about NIST 800-171, NFO controls, assessment procedures, and the SSP and POA&M.
0/7
NIST 800-171 DFARS Clauses
Learn what the purpose of the FAR and DFARS is and what is contained within the DFARS clauses which pertain to cybersecurity requirements for protecting CUI on nonfederal systems.
0/6
NIST 800-171 DoD Assessment Methodology
Learn how to calculate NIST 800-171 SPRS scores in accordance with the DoD Assessment Methodology.
0/2
FedRAMP
Learn about FedRAMP, how it relates to DFARS 252.204-7012, and how to use the FedRAMP Marketplace.
0/3
CMMC Overview
Learn about CMMC, when it will be required, what is contained in DFARS 252.204-7021, and its 3 levels.
0/8
CMMC Scoping Guides
Learn how to scope assets in your organization by understanding the CMMC asset types and the requirements for each.
0/4
CMMC Assessment Guides
Learn about the DoD's assessment guidance and who is responsible for conducting assessments for CMMC levels 1 - 3.
0/2
CMMC Ecosystem Roles
Learn about the roles in the CMMC ecosystem.
0/8
Action Plan
Actionable steps to achieve CMMC compliance or certification.
0/6
Closing Thoughts
0/1
About Lesson
Learn about CMMC scoping, what is in scope for each asset type (CUI assets, security protection assets, contractor risk managed assets, specialized assets, and out of scope assets), and the significance of external service providers.
Resources
- 7 Steps to CMMC – Step 2: Identify Assets for CMMC (Scoping) (summit7.us)
- CMMC Scope – are you ready for an assessment? (cmmcaudit.org)
- CMMC 2.0 Scoping Scenarios Analysis (cmmcaudit.org)
Discuss this lecture at community.grcacademy.io.
0% Complete