Crosswalk
CMMC to NIST Crosswalk
Each CMMC practice with the NIST SP 800-171 Rev 2 requirement it is built on, the Rev 3 counterpart, the SP 800-53 controls behind it and, for Level 3, the SP 800-172 requirement. Open any number to read it.
6 practices. Mappings are the guides' key references and NIST's published relationships; a practice with no mapping yet shows a dash.
| Practice | 800-171 Rev 2 | 800-171 Rev 3 | 800-53 | 800-172 |
|---|---|---|---|---|
| PE.L2-3.10.1Limit Physical Access [CUI Data] | 3.10.1 | 03.10.01 | PE-2PE-4PE-5PE-6 | — |
| PE.L2-3.10.2Monitor Facility | 3.10.2 | 03.10.02 | PE-2PE-4PE-5PE-6 | — |
| PE.L2-3.10.3Escort Visitors [CUI Data] | 3.10.3 | — | PE-3 | — |
| PE.L2-3.10.4Physical Access Logs [CUI Data] | 3.10.4 | — | PE-3 | — |
| PE.L2-3.10.5Manage Physical Access [CUI Data] | 3.10.5 | — | PE-3 | — |
| PE.L2-3.10.6Alternative Work Sites | 3.10.6 | 03.10.06 | PE-17 | — |