Blog tagged as NIST 800-171

A top-of-funnel guide for small DoD subcontractors who think they only need CMMC Level 1 and want to keep it that way. It explains the line between FCI and CUI, how to scope your environment so CUI stays out, what happens if CUI slips in, and the practical steps that protect a Level 1 scope.

Learn how to tell whether your DoD contract requires CMMC Level 1 or Level 2, where the requirement is written, and what to do if it is unclear.