Remove blog nist-sp-800-171-vs-800-53
article thumbnail

CMMC-AB November 30 Town Hall: Key Takeaways and Unanswered Questions

Etactics

Specifically towards the contracts at Level 2 into self-assessed vs third-party assessment. It required contractors with DFARS clause 252.204-7012 to upload a self-assessment of NIST SP 800-171 controls. The majority of them came from NIST SP 800-171 but the Delta 20 practices didn’t.