DFARS Clause 252.204-7025 Notice of Cybersecurity Maturity Model Certification Level Requirements

DFARS Clause 252.204-7021 Contractor Compliance With the Cybersecurity Maturity Model Certification Level Requirements

CMMC Final Program Rule: 32 CFR Part 170

NIST SP 800-171 Rev 3: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations

Class Deviation—Safeguarding Covered Defense Information and Cyber Incident Reporting (DFARS 252.204-7012)

NIST SP 800-172: Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171

CMMC Final Acquisition Rule: 48 CFR Parts 204, 212, 217, and 252

NIST SP 800-53A Rev 5: Assessing Security and Privacy Controls in Federal Information Systems and Organizations

NIST SP 800-171: DoD Assessment Methodology Version 1.2.1

Defence Standard 05-138, Issue 3 – Cyber security for Defence Suppliers