NIST SP 800-218A SSDF for generative AI in defense software

High-intent query: how does NIST SP 800-218A apply to a defense software factory that trains or integrates generative models? The Profile is about how those models are built. CMMC / SP 800-171 is about protecting CUI on contractor systems. Completing SSDF tasks is not a CMMC level.

The 800-218A explainer and the CMMC-adjacent AI data-handling kit are the public companions.

What the Community Profile is

NIST published SP 800-218A in July 2024 (final 26 July 2024). The PDF is the official text.

The abstract says the document augments the secure software development practices and tasks defined in SSDF version 1.1 by adding practices, tasks, recommendations, considerations, notes, and informative references that are specific to AI model development throughout the software development life cycle. Those additions are documented in the form of an SSDF Community Profile. It is intended to be useful to the producers of AI models, the producers of AI systems that use those models, and the acquirers of those AI systems. It should be used in conjunction with NIST Special Publication (SP) 800-218.

The SSDF groups it sits on

Parent SSDF 1.1 (SP 800-218) organizes practices into Prepare the Organization (PO), Protect the Software (PS), Produce Well-Secured Software (PW), and Respond to Vulnerabilities (RV). 800-218A adds model-development recommendations onto those groups. It does not replace the NIST AI RMF. See NIST AI 600-1 for defense contractors.

How this sits next to CMMC and SBOMs

A defense program that trains or integrates a foundation model may need both: 171/CMMC for the CUI environment, and SSDF / 800-218A for how the model software is developed. The DoD RAI Strategy does not make 800-218A a DFARS clause. Supply-chain artifacts stay on data provenance and SBOM / AIBOM.

Directory listings that name software-supply-chain or RMF playbooks include NIST AI RMF Playbook, CycloneDX, CISA SBOM for AI and Sigstore model-transparency. Those pages are not an 800-218A assessment.

The NIST AI RMF kit is the public teaser for RMF vendor questions. It is not an SSDF scorecard.

What this is not

800-218A is a Community Profile, not a certification scheme and not a CMMC level. Completing SSDF tasks is not an AI RMF assessment and not a CDAO toolkit score.