Everything you need to know about
FAR, DFARS,
800-171
(& CMMC)
…and what to do about it
A plain-language guide to the rules that govern how defense contractors protect federal information, and the steps to meet them.
View available options
Three ways to get it
- FREE Hard copy
- Pick one up at CS5 East, Oct. 22-23, at the Gaylord National Resort in National Harbor, Washington DC.
- Digital download
- Free, available after the event.
- Hard copy for sale
- Coming soon.
What the book covers
- FAR and DFARS
- Which contract clauses apply to your company, and what each one requires.
- FCI and CUI
- How to identify the federal information you handle and where it lives in your systems.
- NIST SP 800-171
- How to implement and document the controls an assessor will review.
- CMMC
- What each level requires, and how to prepare for your assessment.
- Program status
- A dated addendum on where the CMMC program stands as of September 2026.