The DoD is partnering with NIST to ensure practices are in line with industry best practices and are optimal for protecting CUI data. Any changes to NIST 800-171 will automatically be incorporated into CMMC.