NIST SP 800-171 and CMMC Level 2 Assessment Scoping Process