SPECIALTY COURSE · RELEASING 2027 · PLANNED $49
CMMC and NIST SP 800-171 in the Cloud
For the defense industrial base: where controlled unclassified information lives, what a cloud provider must hold, and how Level 2 is assessed.
You will get the most from it if you are…
- Contributors at defense contractors and their suppliers
- IT and security staff scoping a CUI enclave
- Consultants supporting a CMMC readiness effort
The lessons.
- 01The three CMMC levelsFederal contract information, CUI and who assesses
- 02Scoping CUIAssets, enclaves and the boundary an assessor will accept
- 03The cloud provider's partWhat DFARS 252.204-7012 asks of a cloud service
- 04The 110 requirements of NIST SP 800-171Read as evidence, family by family
- 05The assessmentSelf-assessment, third-party assessment and the plan of action
How it is delivered.
- Narrated lessons of 8 to 12 minutes
- A one-page job aid for each lesson
- A short check at the end of each lesson
- Files you keep: they play offline, with no account
Narration is AI-generated (OpenAI's Cedar voice). The courses teach preparation and method; they certify no one, grant no approval or authorization, and do not stand in for your assessor, auditor or regulator.