DFARS Resources

Many of these links are embedded in various presentations or on other tabs on this website, but they are all located here for your convenience.

DFARS Interim Rule

DFARS 252.204-7012 – Safeguarding Covered Defense Information and Cyber Incident Reporting

DFARS 252.204-7019 -  Notice of NIST SP 800-171 Assessment Requirements

DFARS 252.204-7020 -  NIST SP 800-171 Assessment Requirements

NIST SP 800-171 Rev. 2  - NIST Cybersecurity Framework

NIST SP 800-171A – Assessment guidelines for NIST SP 800-171 Rev.2

DoD Assessment Methodology -  Tool to use to compute your NIST compliance score

Supplier Performance Risk System – website to upload your compliance score

NIST SP 800-171, POAM Template, SSP Template - NIST templates for Plans of Action and Milestones POAM) and System Security Plans (SSP)

Project Spectrum -  Online Gap Analysis Tool for NIST and CMMC Levels 1 – 2.

CMMC Center of Awesomeness – website developed by Compliance Forge to provide educational resources, technical solutions and gap analyses to NIST SP 800-171 and CMMC.

If you are, or plan to be in the Department of Defense supply chain, you must comply with cybersecurity regulations. To help North Carolina defense contractors understand and implement cybersecurity regulations, multiple State entities and organizations that support the defense industry have established the NC Interagency Cybersecurity Coordinating Committee (I3C). The goals of the committee are to provide defense contractors with 1) up to date and accurate information about cybersecurity regulations and requirements; 2) effective tools they can use to assess their current level of compliance in preparation for DoD certification; and 3) access to reputable companies, institutions and other resources to help them bridge their assessment, compliance, workforce and technical gaps to cybersecurity compliance. 

CyberNC.us is managed by the North Carolina Military Business Center through the North Carolina Interagency Cybersecurity Coordinating Committee (I3C).
Support provided by Fayetteville Technical Community College.

The NCMBC and the I3C are not representatives of the DoD or the CMMC Accreditation body. This website is meant to be a community resource for cybersecurity compliance information.

Copyright 2020, North Carolina Military Business Center.  All Rights Reserved.