NIST 800-171 compliance can be very expensive for SMBs, especially those which don't have full time IT staff. Risk Management (RSK) can be a particular challenge. This presentation crosswalks between CMMI for Services & Development models with the technical practices of being fully NIST compliant. It also provides practical information to help SMBs achieve NIST compliance while using the CMMI framework for solutions and processes. The presentation will cover the Crosswalk between CMMI Dev & Services with NIST requirements, Gap analysis templates, Deconstructing the technical requirements into non-technical language, and Risk Management for compliance and business improvement