Assessment Requirement for Level 1 - ✔✔Self Assessment
Assessment Requirement for Level 2 - ✔✔C3PAO
Assessment Requirement for Level 3 - ✔✔Government (DOD)
ISO 17011:2017 - ✔✔ISO Requirements for accreditation bodies accrediting conformity assessment
bodies. Applies to Cyber-AB for certifying CAICO
CAICO - ✔✔CMMC Assessors and Instructors Certification Organization. Responsible for certifying
individuals. Created by Cyber-AB
LPP - ✔✔Licensed Partner Publishers, develops curriculum for the LTP's
CATM - ✔✔CMMC Approved Training Material
RPA - ✔✔Registered Practitioner Advanced, requires training and exam.
CCI - ✔✔CMMC Certified Instructors
PA - ✔✔Provisional Assessor, requires 10 years of assessements in cyber experience, or 20 yeas as
leader; DOD 8570 IAM Level III certification.
DOD 8570 IAM Level III - ✔✔required for PA. DOD baseline for training before permitting access to DOD
IT Systems. (CISSP, CISM, GSLC ,CCISO)
PI - ✔✔Provisional Instructor
, NISPOM - ✔✔National Industrial Security Operating Manual prescribes the restrictions and safeguarding
for protecting classified information.
DFARS 252.204-7012 - ✔✔Safeguarding Covered Defense Information and Cyber Incident Reporting.
apples when unclassified controlled technical information is present. Includes Requirements for NIST
800-171. Does not require a 3rd party audit. "based on trust"
FAR 52.204-21 - ✔✔CMMC L1: In contracts since June 15, 2016. Requires implementing 15 controls
equivalent to 17 NIST 800-171 controls to protect covered contractor information systems. (FCI)
DITSCAP - ✔✔an information and communications systems standardization and accreditation process
used by the Department of Defense (DoD) USA. Developed in 1992.
DIACAP - ✔✔Department of Defense Information Assurance Certification and Accreditation Process
replaced DITSCAP
DFARS 252.204-7013 - ✔✔Rights in Technical Data
DFARS 252.204-7019 - ✔✔Notice of DOD NIST SP 800-171 Assessment Requirements and CMMC
Requirements
Part 32 of the Code of Federal Regulations - ✔✔States NARA oversees federal government-wide CUI
Program.
Part 48 of the Code of Federal Regulations - ✔✔defines requirements for CMMC in DoD contracts.
requires contactors to achieve compliance at the level specified in the contract. Provides for the
assessment requirements
Federal Acquisition Regulation (FAR) - ✔✔The primary regulation for use by all executive agencies in
their acquisition of supplies and services
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller VasilyKichigin. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $13.48. You're not tied to anything after your purchase.
