thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Advanced

32 CFR Part 170

Federal regulation establishing the CMMC program, effective 16 December 2024.

Definition

The program rule defines CMMC levels, assessment types, scoping, POA&M rules, affirmations, roles in the ecosystem, and phased implementation. The companion 48 CFR acquisition rule (DFARS 252.204-7021 changes) took effect 10 November 2025 to put CMMC requirements into contracts.

Example

A compliance manager reads 32 CFR 170.19 to determine Level 2 scoping requirements.

Exam tip

32 CFR = program rule; 48 CFR = contract clause rule.

Related terms