CMMC Practice MP.L1-3.8.3 – Media Disposal: Sanitize or destroy information system media containing Federal Contract Information before disposal or release for reuse. Links to Publicly Available Resources BCWipe BCWipe is a data sanitization toolset. Carnegie...
CMMC Practice PS.L2-3.9.2 – Personnel Actions: Ensure that organizational systems containing CUI are protected during and after personnel actions such as terminations and transfers. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This...
CMMC Practice PS.L2-3.9.1 – Screen Individuals: Screen individuals prior to authorizing access to organizational systems containing CUI. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides assessment guidance for conducting...
CMMC Practice MA.L2-3.7.4 – Media Inspection: Check media containing diagnostic and test programs for malicious code before the media are used in organizational systems. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides...
CMMC Practice MA.L2-3.7.3 – Equipment Sanitization: Ensure equipment removed for off-site maintenance is sanitized of any CUI. Links to Publicly Available Resources BCWipe BCWipe is a data sanitization toolset. Carnegie Mellon University – Data...
CMMC Practice MA.L2-3.7.6 – Maintenance Personnel: Supervise the maintenance activities of personnel without required access authorization. Links to Publicly Available Resources Beyond Trust – 8 Steps to Reduce Remote Access Security Risks & Tighten...
CMMC Practice MA.L2-3.7.5 – Nonlocal Maintenance: Require multifactor authentication to establish nonlocal maintenance sessions via external network connections and terminate such connections when nonlocal maintenance is complete. Links to Publicly Available...
CMMC Practice MA.L2-3.7.2 – System Maintenance Control: Provide controls on the tools, techniques, mechanisms, and personnel used to conduct system maintenance. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides assessment...
CMMC Practice MA.L2-3.7.1 – Perform Maintenance: Perform maintenance on organizational systems. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides assessment guidance for conducting Cybersecurity Maturity Model...
CMMC Practice IR.L2-3.6.3 – Incident Response Testing: Test the organizational incident response capability. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides assessment guidance for conducting Cybersecurity Maturity...
