Module 3

Question 1

NIST 800-171 and CMMC are the security requirements for what (the focus is)

Answer 1

protecting the confidentiality of CUI in nonfederal systems

Question 2

protecting CUI, the basic security requirements are obtained from what standard?

Answer 2

FIPS 200

Question 3

the derived security requirements, which supplement the basic security requirement are taking security controls from where?

Answer 3

800-53 (security and privacy controls for information systems and organizations)