Crosswalk

CMMC to NIST Crosswalk

Each CMMC practice with the NIST SP 800-171 Rev 2 requirement it is built on, the Rev 3 counterpart, the SP 800-53 controls behind it and, for Level 3, the SP 800-172 requirement. Open any number to read it.

Download CSV

2 practices. Mappings are the guides' key references and NIST's published relationships; a practice with no mapping yet shows a dash.

Practice	800-171 Rev 2	800-171 Rev 3	800-53	800-172
PE.L1-b.1.ixManage Visitors & Physical Access [FCI Data]	3.10.3 3.10.4 3.10.5	—	PE-3	—
PE.L1-b.1.viiiLimit Physical Access [FCI Data]	3.10.1	03.10.01	PE-2 PE-4 PE-5 PE-6	—