CMMC planning
Connect requirements to your workflow.
Read how CUI, NIST, contracts, and CMMC relate, then prepare a brief using broad workflow and operating categories.
Resource library
CMMC context.
Architecture planning.
Explore the CMMC requirements and manufacturing context, or use a short guide to prepare for an infrastructure conversation.
Choose a starting point.
Architecture planning
Describe the environment you need.
Use six prompts to outline workloads, boundaries, resources, dependencies, control, and change.
Open the architecture guideThe collection
Find the right resource.
Planning guides, a SecureEnclave™ overview, project background, and official CMMC and NIST references.
CMMC and NIST explained
Connect the history of CUI, NIST safeguards, defense contract duties, CMMC verification, and the current Revision 2 versus Revision 3 distinction.
- CMMC
- NIST SP 800-171
- CUI
CMMC planning wizard
Answer broad questions about your organization and CUI workflow, then review a planning brief you can use for a first conversation.
- CMMC
- Planning
- Manufacturing
Prepare for an architecture review
Use six prompts to outline your workloads, boundaries, resources, dependencies, responsibilities, and expected changes. Flag unknowns for the review.
- Architecture
- Planning
SecureEnclave™ for defense manufacturers
See how the platform connects the deployed environment to ongoing change, technical evidence, and recovery.
- SecureEnclave™
- CMMC
- Manufacturing
SecureEnclave™ project background
Read about the MxD 23-11-03 development context on the SecureEnclave™ page, with links to the public project records. Those records do not establish endorsement or an assessment result.
- Manufacturing
- CMMC
- Project record
CMMC program overview
Read the authoritative program overview, model structure, implementation phases, assessment cadence, and current rollout status.
- CMMC
- Program status
CMMC Level 2 scoping guide
Use the official guide to understand asset categories and the systems that may process, store, transmit, or provide security for CUI.
- CMMC
- Scoping
- CUI
NIST SP 800-171 Revision 3
Review NIST's current publication for protecting the confidentiality of CUI in nonfederal systems and organizations.
- NIST SP 800-171
- CUI
NIST small business cybersecurity primer
Use NIST SP 1318 for small-business guidance on cybersecurity, risk, and protecting sensitive information.
- Small business
- Cybersecurity
- NIST