Nimble
CybersecurityDefense & Aerospace

CMMC Level 2 to NIST SP 800-171 Crosswalk

cmmc.l2.crosswalk@2.1.0

Practice-by-practice mapping from CMMC Level 2 to the underlying 800-171 requirements.

publishedUS-GOV-PD Verified publisher 1,880 installs

Content is not redistributed by the Marketplace

This package provides mappings, metadata and integration scaffolding only. Obtain the underlying content directly from DoD CIO under its own licence.

Go to source

Overview

Compliance crosswalk letting a CDT answer "which CMMC practices does this control satisfy?" without duplicating either framework. Derived from DoD CIO published CMMC assessment guides.

What's inside

mappings

  • cmmc-l2-to-800-171.csv
  • cmmc-l2-to-800-171.ttl

documentation

  • README.md

Artifact types

Compliance Mapping· MappingsCrosswalk· Mappings

Dependencies

Version history

  • v2.1.0latestNimble ≥ 1.0.08/29/2026

    Current release.

  • v0.9.0Nimble ≥ 1.0.01/31/2026

    Initial public preview.

Manifest

Nimble consumes this machine-readable manifest when resolving and installing the package.

{
  "package": {
    "id": "cmmc.l2.crosswalk",
    "name": "CMMC Level 2 to NIST SP 800-171 Crosswalk",
    "version": "2.1.0",
    "status": "published"
  },
  "publisher": {
    "name": "DoD CIO",
    "type": "government"
  },
  "domains": [
    "cybersecurity",
    "defense-aerospace"
  ],
  "solution_areas": [
    "cmmc",
    "nist",
    "grc",
    "defense-logistics"
  ],
  "artifacts": [
    "compliance-mapping",
    "crosswalk"
  ],
  "dependencies": [
    {
      "id": "nist.800-171r3",
      "version": ">=3.0.0",
      "optional": false
    },
    {
      "id": "nimble.cyber.core",
      "version": ">=1.0.0",
      "optional": false
    }
  ],
  "compatibility": {
    "nimble": {
      "minimum": "1.0.0",
      "maximum": null
    }
  },
  "license": {
    "type": "US-GOV-PD",
    "name": "U.S. Government Work / Public Domain",
    "url": "https://www.usa.gov/government-works",
    "redistribution": "bundled",
    "attribution_required": true,
    "attribution": "CMMC Model documentation, U.S. Department of Defense.",
    "source_authority": "DoD CIO",
    "source_url": "https://dodcio.defense.gov/CMMC/"
  },
  "validation": {
    "security": "scanned",
    "validation": "validated"
  },
  "contents": {
    "mappings": [
      "cmmc-l2-to-800-171.csv",
      "cmmc-l2-to-800-171.ttl"
    ],
    "documentation": [
      "README.md"
    ]
  },
  "distribution": {
    "available": false,
    "reason": "bundled"
  }
}