The Excel crosswalk spreadsheet that comes with the NCP maps the standards to the controls and Assessment Objectives (AOs), so it is straightforward to understand why a requirement in the NCP exists. NIST 800-171 R2 / R3 & CMMC 2.0 Level 2 (Advanced) Policies, Standards, Procedures, SSP ...