Sign in Register

CMMC 2.13

CMMC Practices

Each practice, grouped by domain and cross-referenced to the NIST controls that support it.

All levels Level 1 · Foundational Level 2 · Advanced Level 3 · Expert

Domain: CM — Configuration Managementclear ✕

12 practices

CM

Configuration Management12

CM.L2-3.4.1System Baselining1 refL2 CM.L2-3.4.2Security Configuration Enforcement1 refL2 CM.L2-3.4.3System Change Management1 refL2 CM.L2-3.4.4Security Impact Analysis1 refL2 CM.L2-3.4.5Access Restrictions for Change1 refL2 CM.L2-3.4.6Least Functionality1 refL2 CM.L2-3.4.7Nonessential Functionality1 refL2 CM.L2-3.4.8Application Execution Policy1 refL2 CM.L2-3.4.9User-Installed Software1 refL2 CM.L3-3.4.1eAuthoritative RepositoryL3 CM.L3-3.4.2eAutomated Detection & RemediationL3 CM.L3-3.4.3eAutomated InventoryL3

Looking for the underlying standards? Browse NIST SP 800-171, 800-172 & 800-53 →