Compliance Frameworks

Federal Acquisition Regulation Clause (FAR)

• 15 Practices
• Self Attestation

Defense Federal Acquisition Regulation Supplement DFARS

• NIST 800-171
• Self Attestation
• SSP & POAM

The Federal Information Security Management Act (FISMA)

• NIST 800-53

CMMC

• Cybersecurity framework and maturity model that combines the above + additional practices identified by the DOD and industry
• CMMC-AB