StacksVerified U.S. regulatory reference

32 CFR Part 170, Appendix A

Verified against eCFR.gov as of June 20, 2026View official text on eCFR.gov
Guidance documents include: (a) “CMMC Model Overview” available at https://DoDcio.defense.gov/CMMC/. (b) “CMMC Assessment Guide—Level 1” available at https://DoDcio.defense.gov/CMMC/. (c) “CMMC Assessment Guide—Level 2” available at https://DoDcio.defense.gov/CMMC/. (d) “CMMC Assessment Guide—Level 3” available at https://DoDcio.defense.gov/CMMC/. (e) “CMMC Scoping Guide—Level 1” available at https://DoDcio.defense.gov/CMMC/. (f) “CMMC Scoping Guide—Level 2” available at https://DoDcio.defense.gov/CMMC/. (g) “CMMC Scoping Guide—Level 3” available at https://DoDcio.defense.gov/CMMC/. (h) “CMMC Hashing Guide” available at https://DoDcio.defense.gov/CMMC/.