Controls & assessment objectives

110 controls

• SC.L2-3.13.14SC · System and Communications ProtectionLevel 2CMMC L2

  Voice Over Internet Protocol

  Control and monitor the use of Voice over Internet Protocol (VoIP) technologies.

  • 2objectives
  • 1examples
  • 0threads
• SC.L2-3.13.15SC · System and Communications ProtectionLevel 2CMMC L2

  Communications Authenticity

  Protect the authenticity of communications sessions.

  • 1objectives
  • 1examples
  • 0threads
• SC.L2-3.13.16SC · System and Communications ProtectionLevel 2CMMC L2

  Data At Rest

  Protect the confidentiality of CUI at rest.

  • 1objectives
  • 1examples
  • 0threads
• SI.L2-3.14.1SI · System and Information IntegrityLevel 2CMMC L2

  Flaw Remediation [CUI Data]

  Identify, report, and correct system flaws in a timely manner.

  • 6objectives
  • 1examples
  • 0threads
• SI.L2-3.14.2SI · System and Information IntegrityLevel 2CMMC L2

  Malicious Code Protection [CUI Data]

  Provide protection from malicious code at designated locations within organizational systems.

  • 2objectives
  • 1examples
  • 0threads
• SI.L2-3.14.3SI · System and Information IntegrityLevel 2CMMC L2

  Security Alerts & Advisories

  Monitor system security alerts and advisories and take action in response.

  • 3objectives
  • 1examples
  • 0threads
• SI.L2-3.14.4SI · System and Information IntegrityLevel 2CMMC L2

  Update Malicious Code Protection [CUI Data]

  Update malicious code protection mechanisms when new releases are available.

  • 1objectives
  • 1examples
  • 0threads
• SI.L2-3.14.5SI · System and Information IntegrityLevel 2CMMC L2

  System & File Scanning [CUI Data]

  Perform periodic scans of organizational systems and real-time scans of files from external sources as files are downloaded, opened, or executed.

  • 3objectives
  • 1examples
  • 0threads
• SI.L2-3.14.6SI · System and Information IntegrityLevel 2CMMC L2

  Monitor Communications for Attacks

  Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks.

  • 3objectives
  • 1examples
  • 0threads
• SI.L2-3.14.7SI · System and Information IntegrityLevel 2CMMC L2

  Identify Unauthorized Use

  Identify unauthorized use of organizational systems.

  • 2objectives
  • 1examples
  • 0threads