{"asOf":"2026-09-05","merchant":"SSDF INC","kind":"event","id":"cmmc-32cfr","date":"2024-12-16","title":"32 CFR Part 170 in force","kicker":"Program rule","status":"in_force","body":"CMMC Program procedures (Title 32) became effective. Level 1 uses FAR 52.204-21 (15 basic safeguarding requirements). Level 2 uses NIST SP 800-171 Rev 2 (110 requirements). Level 3 uses selected 800-172 requirements, assessed by DIBCAC.","clerk":"32 CFR 170","cites":["32 CFR Part 170","NIST SP 800-171 R2"],"notes":["Level 2 security requirements are identical to 800-171 Rev 2 — 32 CFR 170.14(c)(3).","Rev 3 is not the CMMC baseline as of this atlas date."]}