公式情報・参考情報

本サイトでは、制度・定義・技術要求を説明する際、主に以下の公式情報を参照します。

  • DoD CIO – CMMC

    • https://dodcio.defense.gov/CMMC/
    • https://dodcio.defense.gov/CMMC/Resources-Documentation/

  • 32 CFR Part 170 – Cybersecurity Maturity Model Certification Program

    • https://www.ecfr.gov/current/title-32/subtitle-A/chapter-I/subchapter-G/part-170

  • NARA – Controlled Unclassified Information

    • https://www.archives.gov/cui/about
    • https://www.archives.gov/cui/registry/category-list

  • 32 CFR Part 2002 – Controlled Unclassified Information

    • https://www.ecfr.gov/current/title-32/subtitle-B/chapter-XX/part-2002

  • NIST SP 800-171 Rev.2（CMMC Level 2の現行評価文脈で重要）

    • https://csrc.nist.gov/pubs/sp/800/171/r2/upd1/final
    • https://doi.org/10.6028/NIST.SP.800-171r2

  • NIST SP 800-171 Rev.3

    • https://csrc.nist.gov/pubs/sp/800/171/r3/final

  • NIST SP 800-171A Rev.3

    • https://csrc.nist.gov/pubs/sp/800/171/a/r3/final

  • NIST SP 800-207 – Zero Trust Architecture

    • https://csrc.nist.gov/pubs/sp/800/207/final

  • NIST SP 800-162 – Attribute Based Access Control

    • https://csrc.nist.gov/pubs/sp/800/162/upd2/final

  • DFARS 252.204-7012

    • https://www.acquisition.gov/dfars/252.204-7012-safeguarding-covered-defense-information-and-cyber-incident-reporting.

  • DFARS 252.204-7021

    • https://www.acquisition.gov/dfars/252.204-7021-contractor-compliance-cybersecurity-maturity-model-certification-level-requirements.

  • DFARS 252.204-7025

    • https://www.acquisition.gov/dfars/252.204-7025-notice-cybersecurity-maturity-model-certification-level-requirements.

  • DDTC – ITAR / 22 CFR Parts 120–130

    • https://www.pmddtc.state.gov/ddtc_public?id=ddtc_public_portal_itar_landing
    • https://www.ecfr.gov/current/title-22/chapter-I/subchapter-M

  • BIS – Export Administration Regulations / Deemed Exports

    • https://www.bis.gov/regulations/ear
    • https://www.bis.gov/learn-support/deemed-exports

  • Microsoft Azure compliance offerings – CMMC

    • https://learn.microsoft.com/en-us/azure/compliance/offerings/offering-cmmc

  • USACE Japan District – Doing Business with the Japan District

    • https://www.poj.usace.army.mil/Business-With-Us/

  • USACE Japan District – Military Missions

    • https://www.poj.usace.army.mil/Missions/Military-Missions/

  • USACE Japan District – References

    • https://www.poj.usace.army.mil/Business-With-Us/References/

  • 32 CFR 170.23 – Application to subcontractors

    • https://www.ecfr.gov/current/title-32/subtitle-A/chapter-I/subchapter-G/part-170/subpart-D/section-170.23

  • DLA – CAGE Code

    • https://www.dla.mil/Working-With-DLA/Applications/Details/Article/2920893/cage-code-commercial-and-government-entity-code/

  • DLA – NATO CAGE

    • https://www.dla.mil/Working-With-DLA/Federal-and-International-Cataloging/NATO/NATO-CAGE/

  • FAR 52.204-16 – Commercial and Government Entity Code Reporting

    • https://www.acquisition.gov/far/52.204-16

  • SAM.gov – External Resources

    • https://sam.gov/about/external-resources

  • PIEE – Procurement Integrated Enterprise Environment

    • https://piee.eb.mil/