CMMC 2.0 (Level 2/3)
Cybersecurity Maturity Model Certification
Mandatory for DoD contractors handling CUI. Level 2 requires alignment with all 110 NIST 800-171 controls.
Learn moreITAR
International Traffic in Arms Regulations
Export controls requiring strict data residency and US-person access restrictions for defense articles and services.
"US-Person Access, US-Soil Data, Zero Exceptions"
Other compliance standards in this category.
Cybersecurity Maturity Model Certification
Mandatory for DoD contractors handling CUI. Level 2 requires alignment with all 110 NIST 800-171 controls.
Learn moreDefense Federal Acquisition Regulation Supplement
DoD contract clause requiring adequate security for covered defense information and cyber incident reporting within 72 hours.
Learn moreProtecting Controlled Unclassified Information in Nonfederal Systems
The underlying technical requirement for protecting non-federal systems handling CUI—110 security controls across 14 families.
Learn more