Can you clearly communicate key metrics about your organization’s NIST SP 800-171 & CMMC compliance efforts to your executives?
This is a critical function for the organization’s leader to inform leadership about what is happening.
In this As the CMMC Churns, we walk you through the slides we used for metrics when presenting at our governance committee meetings and to organizations’ C-suites.
These PowerPoint slides help you to communicate critical information, which using the ProSci ADKAR model, helps to reinforce CMMC key areas to your C-suite while they help to transform your organization’s culture.
These slides and other templates are available at https://peakinfosec.com/resources/nist-sp-800-171-and-cmmc-templates/.
Key CMMC Organizations
- National Archives & Records Administration Controlled Unclassified Information (CUI) Homepage
- DoD CIO’s Cybersecurity Maturity Model Certification (CMMC) Home Page
- Cyber Accreditation Body (Cyber-AB)
- Defense Industrial Base Cybersecurity Assessment Center (DIBCAC) Contractor Resource Page
- Defense Industrial Base (DIB) Cybersecurity Portal
Key Regulations
Key Acquisition References
- 48 CFR § 52.204-21 – Basic Safeguarding of Covered Contractor Information Systems
- DFARS Clause 252.204-7008 Compliance with Safeguarding Covered Defense Information Controls.
- DFARS Clause 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting.
- DFARS Clause 252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements
- DFARS Clause 252.204-7020 NIST SP 800-171 DoD Assessment Requirements.
- DFARS Clause 252.204-7021 Compliance with the Cybersecurity Maturity Model Certification Level Requirements.
