Compliance Evidence
-
DoD Named Machine-Readable Evidence as the Fix. The CUI Tier Isn't There Yet.
The RFI summary Federal News Network obtained puts the cost of CMMC in NIST SP 800-171 implementation and evidence assembly, and the task force's remedies are clearer CUI marking and machine-readable assessment evidence in OSCAL. Microsoft's one published availability table marks every Purview agent capability unavailable in GCC, and it publishes no per-capability table at all for GCC High or DoD.