Understanding how CMMC requirements apply within Microsoft 365 GCC High can be challenging—especially when determining control inheritance and customer responsibilities. This crosswalk maps CMMC Level 2 assessment objectives to NIST SP 800-53 Rev. 5 controls, helping you clearly identify how each requirement is addressed. It also includes fields for inheritance and customer responsibility, along with a companion worksheet designed to integrate with Microsoft’s Customer Responsibility Matrix (CRM). Together, these tools help streamline gap analysis, clarify shared responsibility, and support audit readiness.