Does NIST 800-171 apply to your company?
Required by law when: We sell to US government or defense (FCI/CUI)
NIST SP 800-171 — protecting CUI under DoD contract clauses (DFARS 252.204-7012); the control basis CMMC certifies
See the full list for this profileA prioritization aid, not legal advice. Every basis is shown so your counsel can check it.