We will preempt our Level 2 Practices discussion for a review of the CMMC Final Rule. Key topics we will cover:
Time permitting, we will also continue our discussion of the AC Domain and Level 2 Practices, as noted below.
——————————————————————-
In our first two CMMC Practice session we reviewed the Level 1 Practices within the Access Control (AC) Domain and the Level 2 Practices with a focus on network and device access. Next up we will continue our more in-depth look at the CMMC Level 2 practices within the AC domain.
This session will take a look at the CMMC AC domain practices that focus on user access control and account management:
AC.L2-3.1.4 – Separation of Duties
AC.L2-3.1.5 – Least Privilege
AC.L2-3.1.6 – Non-Privileged Account Use
AC.L2-3.1.7 – Privileged Functions
AC.L2-3.1.8 – Unsuccessful Logon Attempts
AC.L2-3.1.9 – Privacy & Security Notices
AC.L2-3.1.10 – Session Lock
AC.L2-3.1.11 – Session Termination
AC.L2-3.1.15 – Privileged Remote Access
We will also take to time to talk about the “CUI” requirements for the AC Level 1 practices:
AC.L1-3.1.1 Limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems).
AC.L1-3.1.2 Limit information system access to the types of transactions and functions that authorized users are permitted to execute.
AC.L1-3.1.22 Control information posted or processed on publicly accessible information systems.
Whether you are a subcontractor or prime contractor directly with the Department of Defense, you don’t want to miss this session of the CMMC AC domain practices as we get more in-depth on our implementation discussions. Still have questions? Check out our blogs, sign up for CMMC Training, email us directly.
Ready to start checking your compliance Readiness? Monarch’s Security Catapult is a CMMC self-assessment tool to prepare you for a CMMC assessment.
Security Catapult:
Security Catapult was created by authorized CMMC assessors, DoD industry consultants and cybersecurity specialists precisely for Department of Defense contractors.
We’ve transformed reaching your CMMC goals into a logical and collaborative step-by-step process. Whether you are at CMMC Level 1 or 2, and regardless of the size of your organization, the Security Catapult takes the mystery and complexity out of preparing for your audit.
