Skip to content
Expert CMMC

Crosswalk

CMMC to NIST Crosswalk

Each CMMC practice with the NIST SP 800-171 Rev 2 requirement it is built on, the Rev 3 counterpart, the SP 800-53 Rev 4 and Rev 5 controls behind it and, for Level 3, the SP 800-172 requirement and its Rev 3 successor. Open any number to read it.

0 practices. Mappings are the guides' key references and NIST's published relationships; a practice with no mapping yet shows a dash. Every cell comes from an official NIST or DoD table: Rev 3 entries from NIST's change analyses (a withdrawn requirement leads to the requirement NIST says replaces it), Rev 4 controls from SP 800-171 Rev 2 Appendix D, and each Rev 5 control carries the path that reached it. How this crosswalk is built

Practice800-171 Rev 2800-171 Rev 3800-53 Rev 4800-53 Rev 5800-172 (Feb 2021)800-172 Rev 3

Rev 5 paths: D SP 800-171 Rev 2 Appendix D → SP 800-53 Rev 4 control → NIST's Rev 4 → Rev 5 comparison; S source control of the SP 800-171 Rev 3 or SP 800-172 Rev 3 requirement (NIST OSCAL); C SP 800-172 (Feb 2021) Appendix C. The Rev 3 requirement also carries other Rev 2 requirements (hover for which).