CMMC Compliance Guide

How to Identify and Fix Your NIST 800-171 Weak Spots


Listen Later

Submit any questions you would like answered on the podcast!

Are you sure you're NIST 800-171 compliant? In this episode of the CMMC Compliance Guide Podcast, Austin and Brooke break down the most overlooked NIST 800-171 requirements that continue to trip up DoD contractors—and what you can do today to avoid those costly mistakes.

From data flow diagrams to documentation pitfalls, supply chain risks, and misunderstood MFA and logging requirements, this episode is packed with practical insights and actionable takeaways. If you’re pursuing CMMC Level 2 or just trying to boost your SPRS score, this is a must-listen.

💡 You’ll Learn:

  • Why poor scoping is the #1 mistake in compliance
  • How to map your CUI data flow across systems and subcontractors
  • What assessors really expect from your MFA, logging, and risk assessment controls
  • Why your documentation strategy can make or break your assessment
  • What it takes to maintain compliance after you’re “done”
  • How to use the NIST 800-171A Assessment Guide to conduct a real gap analysis
  • The truth about ongoing compliance vs. one-time audits
  • GRC tools, POAMs, and how to build your project roadmap

This episode is your self-assessment gut check. Whether you're just starting or already deep into your compliance journey, don’t miss these expert tips.

🔗 For free resources, visit: https://cmmccomplianceguide.com
📅 Meet us at DibCon, June 3–5, in Oklahoma City!

...more
View all episodesView all episodes
Download on the App Store

CMMC Compliance GuideBy CMMC Compliance Guide