Series

The Rev 3 Walkthrough

One NIST 800-171 family a week, from Rev 2 to Rev 3, published on foxxcyber.com and pointed at the CMMC Navigator. Every piece answers the same two questions for its family: what's worth doing now, and what's premature. Contractors are still assessed on Rev 2, and the series never pretends otherwise.

Every requirement, word for word. The CMMC Navigator shows each Rev. 2 requirement beside its Rev. 3 text, so every part of the series links to the diff it discusses.

Open the revision pages

Part 1 · 2026-09-15NIST 800-171 Rev 2 vs Rev 3: What Actually Changes (and Why You're Still on Rev 2)→Rev 3 cuts 800-171 from 110 requirements to 97, adds three families, and replaces vague wording with fill-in values. Here's the map — and why your contract still says Rev 2.