Call us now:
One is looking for some help from the CMMC community. Could anyone explain how a single software solution can help a DoD DIB contractor comply with 75 NIST SP 800-171 controls for the protection of CUI?
Reviewing CMMC Level 2 and 3 assessment guides seems to make compliance a little more complex. Also, when one evaluates the definitions of Controlled Technical Information and CUI, there seems to be quite a bit of CUI that is handled behind a firewall and held within ERP, CAD, Shop Floor, Test, Finance, and HR systems that need to be secured.
One was not aware that the size of an organisation affected how CUI should be protected. That was the contention by SMBs who pushed back on CMMC compliance. Is there a separate guide for CMMC compliance for SMBs?
Have I read the CMMC level 2 assessment guide incorrectly?
https://lnkd.in/edA6nUMQ
Can anyone help? happy to be corrected?
@Thaddeus Dziekanowski Brian D. McCarthy
Veritas GRC
#cmmc
https://lnkd.in/eVRDSKTZ
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7389279204955148288