{"data":{"id":"us/32-cfr-appendix-a-to-part-170","jurisdiction":"us","citation":"32 CFR Appendix A to Part 170","heading":"Appendix A to Part 170—Guidance","body":"Guidance documents include:\n(a) “CMMC Model Overview” available at https://DoDcio.defense.gov/CMMC/.\n(b) “CMMC Assessment Guide—Level 1” available at https://DoDcio.defense.gov/CMMC/.\n(c) “CMMC Assessment Guide—Level 2” available at https://DoDcio.defense.gov/CMMC/.\n(d) “CMMC Assessment Guide—Level 3” available at https://DoDcio.defense.gov/CMMC/.\n(e) “CMMC Scoping Guide—Level 1” available at https://DoDcio.defense.gov/CMMC/.\n(f) “CMMC Scoping Guide—Level 2” available at https://DoDcio.defense.gov/CMMC/.\n(g) “CMMC Scoping Guide—Level 3” available at https://DoDcio.defense.gov/CMMC/.\n(h) “CMMC Hashing Guide” available at https://DoDcio.defense.gov/CMMC/.","path":["Title 32—National Defense","Subtitle A—Department of Defense","CHAPTER I—OFFICE OF THE SECRETARY OF DEFENSE","SUBCHAPTER G—DEFENSE CONTRACTING","PART 170—CYBERSECURITY MATURITY MODEL CERTIFICATION (CMMC) PROGRAM"],"source_url":"https://www.ecfr.gov/api/versioner/v1/full/2026-08-25/title-32.xml","current_through":"2026-08-25","vintage":"","retrieved_at":"2026-08-27T02:25:30Z","sha256":"768dd44109141a1186ea51183f953f0b69a0c7e056ee153dbda137369f6d95df","source_id":"us-cfr","stale":true,"prev":"us/32-cfr-170.24","next":"us/32-cfr-173.1"},"notice":"GroundRules: Original legal text. Not legal advice."}