Crosswalk
CMMC to NIST Crosswalk
Each CMMC practice with the NIST SP 800-171 Rev 2 requirement it is built on, the Rev 3 counterpart, the SP 800-53 controls behind it and, for Level 3, the SP 800-172 requirement. Open any number to read it.
3 practices. Mappings are the guides' key references and NIST's published relationships; a practice with no mapping yet shows a dash.
| Practice | 800-171 Rev 2 | 800-171 Rev 3 | 800-53 | 800-172 |
|---|---|---|---|---|
| RA.L2-3.11.1Risk Assessments | 3.11.1 | 03.11.01 | RA-3 | — |
| RA.L2-3.11.2Vulnerability Scan | 3.11.2 | 03.11.02 | RA-5RA-5 (5) | — |
| RA.L2-3.11.3Vulnerability Remediation | 3.11.3 | — | RA-5 | — |