How HaloCAD enables you to satisfy NIST controls for CMMC 2.0

NIST SP 800-171 standards used to be voluntary - outlining best practice for non-federal agencies that handled Controlled Unclassified Information (CUI). Now, with CMMC 2.0, the 110 NIST SP 800-171 controls are mandatory for all DIB contractors that handle CUI (to achieve CMMC Level 2). What’s more, you need to prove you adhere to at least 88 of these 110 controls by Q1 2025. 

Thanks to Secude’s HaloCAD, satisfying the NIST SP 800-171 controls for CAD files that are CUI is considerably simpler. Here’s how. 

5 things you need to know about NIST SP 800-171 for CMMC

CAD files that are considered CUI, such as technical drawings for DoD contracts, need to satisfy 110 NIST SP 800-171 controls - which are assessed by external third-parties.

• You need to adhere to all 110 controls to be CMMC certified, but if you score at least 88 on your initial assessment you will be allowed to create Plans of Action & Milestones (POA&Ms).
• Satisfying these NIST SP 800-171 controls requires a lot of behind-the-scenes work, such as producing documentation, and takes around six months to implement. 
• The 110 controls are divided into 14 control families. 
• Secude’s HaloCAD simplifies certification in nine of 14 families (64.3%) and 36 of the 110 assessment objectives (32.7%), including all of the objectives in 3.5 Identification and Authentication (IA).

How HaloCAD satisfies NIST SP 800-171 standards for CMMC

HaloCAD makes it simpler and faster to complete NIST SP 800-171 controls in almost two-thirds of the families and one-third of the subfamilies. 

For example, here’s five instances that HaloCAD supports NIST SP 800-171 controls: 

For a full breakdown of all the subfamilies that HaloCAD covers and advice on how to perform your own CMMC assessment, download our CMMC 2.0 ‘cheat sheet’ for CUI.

"With regards to CMMC, Secude handles the Access Control requirements really well. It covers all of the relevant information and protections around how CAD files are accessed, who can access them, what the daily functions are, and who has the access rights." -- Aerospace contractor

Download our eBook: ‘How to easily protect and track CAD files that are CUI for CMMC compliance’. 

‍