Reference
Reference standards
CMMC is the model. These NIST SP 800-series publications are the standards CMMC practices are cross-referenced to — browse them here, or follow the cross-references from any CMMC practice.
NIST SP 800-171 · Rev 2
Protecting CUI in Nonfederal Systems
Browse requirementsNIST SP 800-171 · Rev 3
Protecting CUI in Nonfederal Systems (Revision 3)
Browse requirementsNIST SP 800-172 · Rev FINAL
Enhanced Security Requirements for Protecting CUI
Browse requirementsNIST SP 800-53 · Rev 4
Security and Privacy Controls (Revision 4)
Browse controlsNIST SP 800-53 · Rev 5