Box for Government
by Box
Overview
Box for Government by Box is a cloud storage solution.
What CMMC 2.0 certifies
CMMC 2.0 certifies your environment, not a product. Box for Government is one component inside that boundary. The NIST SP 800-171 controls it does not address are yours to cover elsewhere — in other tools, in process, and in your System Security Plan (SSP) — before a CMMC 2.0 assessment.
NIST SP 800-171 control families
The 110 requirements a CMMC 2.0 Level 2 environment is assessed against, by family. Use them to record, in your SSP, which ones Box for Government addresses for you and which stay yours.
Browse the NIST SP 800-171 control families →Other Cloud Storage products
Related Compliance Assessments
Frequently Asked Questions
Is Box for Government CMMC compliant?
No product is CMMC-certified; CMMC 2.0 certifies your organization's environment. Box for Government is one component inside that boundary; the NIST SP 800-171 controls it does not address are yours to cover elsewhere.
What does CMMC 2.0 certify?
Your organization's environment — the people, processes and systems that handle CUI — assessed against the 110 NIST SP 800-171 requirements. It does not certify individual products such as Box for Government.
Check your full tech stack
80+ enterprise tools in a CMMC 2.0 environment.
Open the CMMC 2.0 readiness check