SI.L1-3.14.5 System & File Scanning

CMMC Practice SI.L1-3.14.5 – System & File Scanning: Perform periodic scans of the information system and real-time scans of files from external sources as files are downloaded, opened, or executed. Links to Publicly Available Resources Anti-Malware Testing...

SI.L1-3.14.4 Update Malicious Code Protection

CMMC Practice SI.L1-3.14.4 – Update Malicious Code Protection: Update malicious code protection mechanisms when new releases are available. Links to Publicly Available Resources Anti-Malware Testing Standards Organization (AMTSO) AMTSO is the Anti-Malware...

SI.L1-3.14.2 Malicious Code Protection

CMMC Practice SI.L1-3.14.2 – Malicious Code Protection: Provide protection from malicious code at appropriate locations within organizational information systems. Links to Publicly Available Resources Anti-Malware Testing Standards Organization (AMTSO) AMTSO is...

SI.L1-3.14.1 Flaw Remediation

CMMC Practice SI.L1-3.14.1 – Flaw Remediation: Identify, report, and correct information and information system flaws in a timely manner. Links to Publicly Available Resources BrightTALK – Is Your Vulnerability Management Program Vulnerable? In this two...

SC.L1-3.13.5 Public-Access System Separation

CMMC Practice SC.L1-3.13.5 – Public-Access System Separation: Implement subnetworks for publicly accessible system components that are physically or logically separated from internal networks. Links to Publicly Available Resources CMMC Level 1 Assessment Guide...

SC.L1-3.13.1 Boundary Protection

CMMC Practice SC.L1-3.13.1 – Boundary Protection: Monitor, control, and protect organizational communications (i.e., information transmitted or received by organizational information systems) at the external boundaries and key internal boundaries of the...