CMMCDocs.comHome / Glossary / DFARS 252.204-7020
DFARS 252.204-7020
Also known as: 7020
The DFARS clause giving DoD the right to verify a contractor's NIST SP 800-171 self-assessment score and flow the requirement down to subcontractors.
DFARS 252.204-7020, 'NIST SP 800-171 DoD Assessment Requirements,' is the operational companion to DFARS 252.204-7019. It gives the DoD the right to conduct a higher-tier assessment (Medium or High) of a contractor's NIST SP 800-171 implementation and requires contractors to flow the same requirements down to subcontractors handling CUI.
Medium assessments are typically conducted by DCMA personnel; High assessments are conducted by DIBCAC and involve on-site verification of evidence. CMMC 2.0 is largely replacing the need for Medium and High DoD-led assessments by establishing the C3PAO certification path, but the underlying clause and DoD's verification authority remain in force.
Stop Googling. Start working.
CMMCDocs has all 110 NIST SP 800-171 Rev 2 requirements built in — with the language, the templates, and the evidence vault you need. Spin up a free demo workspace and click around the way an assessor would.
Get my demo account