OpportunitiesCompaniesEventsCommunitiesJobsResourcesPricing
Log InJoin GovConUnited Free

CMMC and NIST SP 800-171

Understand the cybersecurity rules that come with defense contracts: the difference between FCI and CUI, what DFARS 252.204-7012 and NIST SP 800-171 require, how SPRS scores work, what each CMMC level means, and where the rollout stands.

0 of 5 lessons passed · each quiz needs 80% · pass a lesson +15 XP · finish the path +100 XP · +25 Credits + the Cyber Ready badge

Start the path
  1. 1. FCI and CUI: what you're protectingThe two kinds of government information that drive your cybersecurity obligations.2 min read · 5-question quiz
  2. 2. DFARS 7012 and NIST SP 800-171The clause that has required CUI protection on defense contracts for years.2 min read · 5-question quiz
  3. 3. SPRS scores and DFARS 7019 and 7020How you score yourself against NIST SP 800-171 and report it to DoD.2 min read · 5-question quiz
  4. 4. CMMC levels and assessmentsThree levels, who assesses each, and how often you affirm.2 min read · 5-question quiz
  5. 5. Where the rollout stands and what to do nowThe phase-in, the 2026 pause, and the steps that pay off either way.2 min read · 5-question quiz

Sources

CMMC and NIST SP 800-171 · Learn · GovConUnited