RA.L2-3.11.1 Risk Assessments

CMMC Practice RA.L2-3.11.1 – Risk Assessments: Periodically assess the risk to organizational operations (including mission, functions, image, or reputation), organizational assets, and individuals, resulting from the operation of organizational systems and the...

MP.L2-3.8.9 Protect Backups

CMMC Practice MP.L2-3.8.9 – Protect Backups: Protect the confidentiality of backup CUI at storage locations. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides assessment guidance for conducting Cybersecurity Maturity...

PE.L2-3.10.6 Alternative Work Sites

CMMC Practice PE.L2-3.10.6 – Alternative Work Sites: Enforce safeguarding measures for CUI at alternate work sites. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides assessment guidance for conducting Cybersecurity...

PE.L2-3.10.2 Monitor Facility

CMMC Practice PE.L2-3.10.2 – Monitor Facility: Protect and monitor the physical facility and support infrastructure for organizational systems. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides assessment guidance for...

PE.L1-3.10.5 Manage Physical Access

CMMC Practice PE.L1-3.10.5 – Manage Physical Access: Control and manage physical access devices. Links to Publicly Available Resources CMMC Level 1 Assessment Guide This document provides assessment guidance for Level 1 of the Cybersecurity Maturity Model...

PE.L1-3.10.4 Physical Access Logs

CMMC Practice PE.L1-3.10.4 – Physical Access Logs: Maintain audit logs of physical access. Links to Publicly Available Resources Cisco – Why Integrate Physical and Logical Security? The document describes the importance of integrating physical and logical...