Crosswalk
CMMC to NIST Crosswalk
Each CMMC practice with the NIST SP 800-171 Rev 2 requirement it is built on, the Rev 3 counterpart, the SP 800-53 controls behind it and, for Level 3, the SP 800-172 requirement. Open any number to read it.
10 practices. Mappings are the guides' key references and NIST's published relationships; a practice with no mapping yet shows a dash.
| Practice | 800-171 Rev 2 | 800-171 Rev 3 | 800-53 | 800-172 |
|---|---|---|---|---|
| MP.L1-b.1.viiMedia Disposal [FCI Data] | 3.8.3 | 03.08.03 | MP-2MP-4MP-6 | — |
| MP.L2-3.8.1Media Protection | 3.8.1 | 03.08.01 | MP-2MP-4MP-6 | — |
| MP.L2-3.8.2Media Access | 3.8.2 | 03.08.02 | MP-2MP-4MP-6 | — |
| MP.L2-3.8.3Media Disposal [CUI Data] | 3.8.3 | 03.08.03 | MP-2MP-4MP-6 | — |
| MP.L2-3.8.4Media Markings | 3.8.4 | 03.08.04 | MP-3 | — |
| MP.L2-3.8.5Media Accountability | 3.8.5 | 03.08.05 | MP-5 | — |
| MP.L2-3.8.6Portable Storage Encryption | 3.8.6 | — | MP-5 (4) | — |
| MP.L2-3.8.7Removable Media | 3.8.7 | 03.08.07 | MP-7 | — |
| MP.L2-3.8.8Shared Media | 3.8.8 | — | MP-7 (1) | — |
| MP.L2-3.8.9Protect Backups | 3.8.9 | 03.08.09 | CP-9 | — |