All 110 Controls Mapped

NIST 800-171 Compliance for Defense Contractors

Protect CUI with evidence from your Terraform. Map IaC to all 110 NIST 800-171 controls. Prepare for CMMC 2.0 certification automatically.

Start NIST Assessment See All Controls

All 14 Control Families

Complete coverage of NIST SP 800-171 Rev 2. Every control mapped to IaC configurations.

3.1
Access Control
22 controls
3.2
Awareness & Training
3 controls
3.3
Audit & Accountability
9 controls
3.4
Configuration Mgmt
9 controls
3.5
Identification & Auth
11 controls
3.6
Incident Response
3 controls
3.7
Maintenance
6 controls
3.8
Media Protection
9 controls
3.9
Personnel Security
2 controls
3.10
Physical Protection
6 controls
3.11
Risk Assessment
3 controls
3.12
Security Assessment
4 controls
3.13
System & Comms
16 controls
3.14
System Integrity
7 controls

Prepare for CMMC Certification

NIST 800-171 is the foundation for CMMC Level 2. Get a head start on your certification.

CMMC Level 1

Basic cyber hygiene - 17 practices from FAR 52.204-21

  • Self-assessment allowed
  • Federal Contract Information (FCI)
  • Infraproof maps all 17 practices

CMMC Level 2

Advanced cyber hygiene - All 110 NIST 800-171 controls

  • C3PAO assessment required
  • Controlled Unclassified Information (CUI)
  • Infraproof maps all 110 controls

CMMC Level 3

Expert - NIST 800-172 enhanced security

  • Government-led assessment
  • Critical CUI programs
  • Enhanced controls support coming

Ready to Protect CUI?

Start your NIST 800-171 assessment. See your compliance score in minutes.

Start Free Assessment