About
About Expert CMMC
A free, public reference that helps defense contractors understand CMMC, see how its practices relate to the NIST publications behind them, and plan how to implement and evidence each one.
What this site is
Expert CMMC cross-references the CMMC 2.13 practices against NIST SP 800-171, 800-172 and 800-53. It is written for defense contractors preparing for a CMMC self-assessment or certification, and for the implementers and assessors who support them. Each practice page shows the official requirement and assessment objectives, the NIST controls it is built on, and editorial guidance on how to implement it and what evidence to collect.
Practice numbers, titles and cross-references are public. The full text of the NIST reference standards is available with a free account. The official documents are listed on the Resources page.
Independence
Expert CMMC is independently maintained and is not affiliated with or endorsed by the U.S. Department of Defense, the Cyber AB, or NIST. Implementation guidance and product mentions are editorial, not endorsements. Always confirm against the official source documents and your contracts.
Contact
Questions, corrections, or feedback are welcome. Email [email protected].
Legal
Read our Privacy Policy and Terms of Use.