DeshCyber Logo

Step 1 of 3: Identity

CMMC 2.0

Phase 4 · Attestation & reporting
Prev19 / 23Next

Defense Supply Chain Flow-Down Governance

Defense subcontractor compliance verification, DFARS flowdown tracking, and vendor score validation.

Basis: DFARS 252.204-7020 NIST Assessment Requirements

3 steps11 fields~12 minUpdated 2026-10-10Specification
Record status
  1. supplier onboardingstart
  2. supplier attested
  3. supplier offboardedend

At a glance

Before you start
  • Open it: CMMC › Defense Supply Chain Flow-Down Governance /cmmc/supply-chain
  • Role: analystmanagersupervisoradmin
Regulatory basis

DoD Cybersecurity Maturity Model Certification (CMMC 2.0 / NIST SP 800-171)

What happens next
  1. Supplier attested analystmanagersupervisoradmin
  2. Offboard supplier analystmanagersupervisoradmin
  3. Offboard (attested) analystmanagersupervisoradmin
  4. Revoke supplier trust analystmanagersupervisoradmin

Step-by-step procedure

3 steps, completed in order. Each step is validated against the schema before the next unlocks.

Step 1 of 3

Identity

ScreenCMMC › Defense Supply Chain Flow-Down Governance

Complete the Identity fields. Each value is validated against the schema before the next step unlocks.

required“optional” — may be left empty
  • Domain entity ID (required)

    entityId

    The organisation or system this record is about — lowercase with dashes, e.g. acme-corp-hq. Pick one you have used before, or type a new id to create it.

  • Inherited controlsoptional

    controlIds

    Enter inherited controls.

  • Trust verification evidenceoptional

    verificationEvidenceRef

    Enter trust verification evidence.

1 / 3

Next in CMMC 2.0

Continue with the next guide in this framework's table of contents.

DoD Regulatory Mapping & DFARS Compliance
All CMMC 2.0 guides23
All guides