Cybersecurity Maturity Model Certification (CMMC) | Security Assessment - Level 2

Security Assessment - Level 2
CMMC CA.2.159 - Implement Plans of Action to Address Vulnerabilities
Requirement text: CA.2.159: Develop and implement plans of action designed to correct deficiencies and reduce or eliminate vulnerabilities in organizational systems. DISCUSSION FROM SOURCE: DRAFT NIST SP 800-171 R2 The plan of action is a key ...
CMMC CA.2.158 - Periodically Assess Effectiveness of Security Controls
Requirement text: CA.2.158: Periodically assess the security controls in organizational systems to determine if the controls are effective in their application. DISCUSSION FROM SOURCE: DRAFT NIST SP 800-171 R2 Organizations assess security controls ...
CMMC CA.2.157 - Develop and Periodically Update System Security Plans
Requirement text: CA.2.157: Develop, document, and periodically update system security plans that describe system boundaries, system environments of operation, how security requirements are implemented, and the relationships with or connections to ...

Cybersecurity Maturity Model Certification (CMMC) | Security Assessment - Level 2 | Knowledge Base