Current Draft Publications

RESOURCES

NEW Cybersecurity Maturity Model Certification (CMMC) Program: Proposed Final Ruling

The DoD has released the proposed final ruling for the CMMC program. Link | Download
December 22, 2023

DRAFT NIST 800-172 “A” Assessment Guidance Released

NIST has released the draft version of its assessment guide for NIST 800-172 (Formerly NIST 800-171B) Link | Download
April 27, 2021

Defense Federal Acquisition Regulation Supplement: Assessing Contractor Implementation of Cybersecurity Requirements (DFARS Case 2019-D041)

The DoD has issued an interim rule to amend the DFARS cybersecurity regulations to implement a DoD Assessment Methodology and Cybersecurity Maturity Model (CMMC) framework in order to assess contractor implementation of cybersecurity requirements and enhance the protection of unclassified information within the DoD supply chain. (Comments on the interim rule should be submitted in writing on or before 60 days after date of publication in the Federal Register.) Link | Download
September 29, 2020

Cybersecurity Maturity Model Certification (CMMC) DRAFT Version 0.6 (November 7, 2019)

This is the most recent draft of the CMMC, taking into account industry feedback that was received by DoD after releasing CMMC Draft version 0.4 for public comments in September 2019. Link | Download
November 7, 2019

NIST SP 800-171B Draft Released June 2019 – Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations: Enhanced Security Requirements for Critical Programs and High Value Assets

Draft NIST SP 800-171B provides additional recommendations for enhanced security requirements to protect Controlled Unclassified Information (CUI) from advanced persistent threats (APTs). Link | Download
June 1, 2019

NIST SP 800-171 Revision 2 Draft Released June 2019: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations

NIST describes draft NIST SP 800-171 Rev. 2 as “minor editorial changes”. Link | Download
June 1, 2019