AC.L2-3.1.10 Session Lock

CMMC Practice AC.L2-3.1.10 – Session Lock: Use session lock with pattern-hiding displays to prevent access and viewing of data after a period of inactivity. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides assessment...

AC.L2-3.1.8 Unsuccessful Logon Attempts

CMMC Practice AC.L2-3.1.8 – Unsuccessful Logon Attempts: Limit unsuccessful logon attempts. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides assessment guidance for conducting Cybersecurity Maturity Model Certification...

AC.L2-3.1.6 Non-Privileged Account Use

CMMC Practice AC.L2-3.1.6 – Non-Privileged Account Use: Use non-privileged accounts or roles when accessing nonsecurity functions. Links to Publicly Available Resources BrightTalk – Global State of Privileged Account Management Video presented by Thycotic...

AC.L2-3.1.5 Least Privilege

CMMC Practice AC.L2-3.1.5 – Least Privilege: Employ the principle of least privilege, including for specific security functions and privileged accounts. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides assessment...

AC.L2-3.1.21 Portable Storage Use

CMMC Practice AC.L2-3.1.21 – Portable Storage Use: Limit use of portable storage devices on external systems. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides assessment guidance for conducting Cybersecurity Maturity...

AC.L2-3.1.9 Privacy & Security Notices

CMMC Practice AC.L2-3.1.9 – Privacy & Security Notices: Provide privacy and security notices consistent with applicable CUI rules. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides assessment guidance for conducting...