Implementation examples

4 examples referencing Vulnerability scanner

• MA.L2-3.7.4[a]

  Vendor diagnostic media is scanned on an isolated kiosk before it touches anything

  AO coverage. Addresses the Media Inspection objective: media containing diagnostic and test programs is checked for malicious code before use on systems that process, store, or transmit CUI. Intake…

  • Vulnerability scanner
  • CrowdStrike Falcon

  CCControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet
• SI.L2-3.14.5[a] [b] [c]

  Weekly full scans plus real-time scanning of every externally sourced file

  AO coverage. Addresses all three System & File Scanning objectives: the scan frequency is defined, periodic scans happen at that frequency, and files from external sources are scanned in real time.…

  • Endpoint protection
  • Vulnerability scanner
  • Microsoft Defender
  • Sandbox detonation

  CCControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet
• IA.L2-3.5.10[a] [b]

  Salted hashes at rest, no cleartext protocols on the wire, and a CI check against logging secrets

  AO coverage. Addresses both Cryptographically-protected Passwords objectives — storage and transit — for the directories, applications, and network devices in scope. Storage. The directory stores…

  • Secrets vault
  • Active Directory
  • Vulnerability scanner

  CCControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet
• SC.L2-3.13.11[a]

  Org-approved crypto module list; BitLocker and TLS configured to approved modes

  AO coverage. Addresses all FIPS-validated cryptography objectives claimed for in-scope systems in this pattern. Approved modules. Maintain an inventory of cryptographic modules in use (OS FDE, TLS…

  • Endpoint encryption
  • Cloud IdP
  • TLS terminator
  • Cryptography

  CCControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet