Skip to main content
Back to results
X-CMMC Informational

Obtain and Maintain CMMC Certification at the Required Level

Official citation: 32 CFR Part 170; DFARS 252.204-7021

Class: informational · Severity: high

Statement of the obligation — verify against source

32 CFR Part 170; DFARS 252.204-7021

What it means

Informational CUI obligation (Cloud Authorization & Continuous Monitoring).

Required by

  • 32 CFR Part 2002
  • DIB32 CFR Part 2002

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.