CMMC Assessment Objectives — 800-171A Rev 2 (with Rev 3 Crosswalk)

CMMC Assessment Objectives — 800-171A Rev 2 (with Rev 3 Crosswalk)

The scoreable layer underneath every CMMC Level 2 assessment. Where cmmc-expert describes the CMMC program, this skill captures the 320 specific objectives an assessor is actually scoring against, plus the structural Rev 2 → Rev 3 mapping.

How to use this skill (paired with cmmc-expert)

Lookup patterns:

• By control: Jump to the family heading (## 3.X) → find the practice number.
• By objective: Each practice lists [a], [b], [c]... — these are the scoreable units.
• By Rev 3 equivalent: Jump to "Rev 2 → Rev 3 Crosswalk" → find the family → row by Rev 2 ID.
• For withdrawn controls: See the "Quick Reference: Withdrawn Rev 2 Controls" table.

Source & Verification Status

Layer 1 — Assessment objectives (Rev 2):

• Source: NIST SP 800-171A (June 2018; published assessment guide for 800-171 Rev 2).
• Status: Withdrawn May 14, 2024; still operative for CMMC Level 2 under current DoD rulemaking.
• DOI for parent 800-171 Rev 2: https://doi.org/10.6028/NIST.SP.800-171r2
• Text below is verbatim from the PDF.

Layer 2 — Rev 2 → Rev 3 crosswalk:

• Source: NIST SP 800-171 Rev 3 (Final, May 2024).
• AC, AT, AU families: PDF-verified.
• CM through SI families: high-confidence training-knowledge mapping; verify against the Rev 3 PDF before relying on it for a Rev 3 assessment deliverable.

Critical constants for Rev 2:

• 14 control families · 110 controls · 320 assessment objectives.
• Numbering scheme: Chapter.Family.Requirement[Objective] — e.g., 3.1.1[a] = AC, requirement 1, objective a.