Breaking Down NIST 800-171 Rev 3 Implementation

About this episode

The episode discusses the changes in NIST 800-171 Rev 3 and the importance of compliance and security planning.

In this episode, Kaleigh and Bobby are joined by Axiom's own, Adam Evans, to discuss the significant changes introduced in NIST 800-171 Rev 3, focusing on the transition from Rev 2 to Rev 3, the importance of Organizational Defined Parameters (ODPs), and the role of external service providers in compliance. They emphasize the need for System Security Plans (SSPs) to be living documents that adapt to evolving security needs and the necessity for contractors to prepare for the upcoming changes ...

People in this episode

Host: Bobby Guerra

Guests: Kaleigh, Adam Evans

Topics covered

• NIST 800-171
• compliance
• security plans
• organizational defined parameters
• external service providers

Keywords

• NIST 800-171
• Rev 3
• compliance
• System Security Plans
• Organizational Defined Parameters
• security needs
• external service providers

Mentioned in this episode

Organizations: Axiom, NIST

More episodes of Climbing Mount CMMC

• A Deep Dive into Rev 3: Incident Response (feat. Adam Evans) · June 11, 2026 · 22 min
• What Qualifies As a "Significant Change" in CMMC? · June 4, 2026 · 37 min
• What is CMMC Inheritance and How Do I Apply It? (feat. Adam Evans) · May 28, 2026 · 29 min
• What is "The Game of Chicken" in CMMC? (feat. Lawrence Cruciana) · May 21, 2026 · 47 min
• Cyb-Her: Transitioning Your MSP to CMMC Compliance · May 14, 2026 · 27 min
• Working with a C3PAO (feat. Fernando Machado) · May 7, 2026 · 43 min