FedRAMP, StateRAMP, and CMMC are entirely based on NIST Standards. If you want to do business with the federal, state or local government you will need to compl

FedRAMP, StateRAMP, and CMMC are entirely based on NIST Standards. If you want to do business with the federal, state or local government you will need to comply with these regulations (Soon, these programs are being rolled out) Edit: Granted, OP obviously has no idea what they're talking about. They are very forward thinking methods for ensuring a zero trust network, communications and data exchange. They include very explicit controls and requirements for maintaining data security.