User contributions for David

28 March 2025

• 01:4301:43, 28 March 2025 diff hist +15 Level 3 Assessment Guide →RA.L3-3.11.5e – Security Solution Effectiveness
• 01:4201:42, 28 March 2025 diff hist +5,483 Level 3 Assessment Guide →Risk Assessment (RA)

27 March 2025

• 16:2316:23, 27 March 2025 diff hist +45,044 Evidence Collection Approach No edit summary
• 03:4703:47, 27 March 2025 diff hist +81 N Commonly Accepted and Practiced CMMC Operation Matrix Created page with "== Commonly Accepted and Practiced CMMC Operating Model == Under Construction!!!"
• 03:4603:46, 27 March 2025 diff hist +2 MediaWiki:Sidebar No edit summary
• 03:4503:45, 27 March 2025 diff hist +44 MediaWiki:Sidebar No edit summary
• 03:4003:40, 27 March 2025 diff hist +72 MediaWiki:Sidebar No edit summary
• 03:3503:35, 27 March 2025 diff hist −1 Evidence Collection Approach →Evidence Collection Approach for CMMC Practices Levels 1 and 2
• 01:5201:52, 27 March 2025 diff hist +61,461 N Evidence Collection Approach Created page with "For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you. == Evidence Collection Approach for CMMC Practices Levels 1 and 2 == The following table contains the DIBCAC Evidence collection approach for the CMMC Lvels 1 and 2 practices and their Assessment Objectives. The following tables provide a general approach between Assessment Objectives (AOs) and Assessment Methods that may be used. These are not to be construe..."
• 01:4001:40, 27 March 2025 diff hist −84,665 Level 3 Assessment Guide No edit summary
• 01:2801:28, 27 March 2025 diff hist +4,554 N Practice PS.L3-3.9.2e Details Created page with "'''Source of Reference: The official [https://dodcio.defense.gov/cmmc/Resources-Documentation/ CMMC Level 3 Assessment Guide] from the Department of Defense Chief Information Officer (DoD CIO).''' For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you. == PS.L3-3.9.2E – ADVERSE INFORMATION == === SECURITY REQUIREMENT === Ensure that organizational systems are protected if adverse information develops or is obtai..." current
• 01:2801:28, 27 March 2025 diff hist +5,875 N Practice IR.L3-3.6.2e Details Created page with "'''Source of Reference: The official [https://dodcio.defense.gov/cmmc/Resources-Documentation/ CMMC Level 3 Assessment Guide] from the Department of Defense Chief Information Officer (DoD CIO).''' For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you. == IR.L3-3.6.2E – CYBER INCIDENT RESPONSE TEAM == === SECURITY REQUIREMENT === Establish and maintain a cyber incident response team that can be deployed by the o..." current
• 01:2801:28, 27 March 2025 diff hist +5,817 N Practice IR.L3-3.6.1e Details Created page with "'''Source of Reference: The official [https://dodcio.defense.gov/cmmc/Resources-Documentation/ CMMC Level 3 Assessment Guide] from the Department of Defense Chief Information Officer (DoD CIO).''' For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you. == IR.L3-3.6.1E – SECURITY OPERATIONS CENTER == === SECURITY REQUIREMENT === Establish and maintain a security operations center capability that operates <u>24/7,..." current
• 01:2701:27, 27 March 2025 diff hist +7,786 N Practice IA.L3-3.5.3e Details Created page with "'''Source of Reference: The official [https://dodcio.defense.gov/cmmc/Resources-Documentation/ CMMC Level 3 Assessment Guide] from the Department of Defense Chief Information Officer (DoD CIO).''' For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you. == IA.L3-3.5.3E – BLOCK UNTRUSTED ASSETS == === SECURITY REQUIREMENT === Employ automated or manual/procedural mechanisms to prohibit system components from conne..." current
• 01:2701:27, 27 March 2025 diff hist +7,998 N Practice IA.L3-3.5.1e Details Created page with "'''Source of Reference: The official [https://dodcio.defense.gov/cmmc/Resources-Documentation/ CMMC Level 3 Assessment Guide] from the Department of Defense Chief Information Officer (DoD CIO).''' For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you. == IA.L3-3.5.1E – BIDIRECTIONAL AUTHENTICATION == === SECURITY REQUIREMENT === Identify and authenticate <u>systems and system components, where possible</u>, bef..." current

26 March 2025

• 03:3903:39, 26 March 2025 diff hist −2,401 Level 3 Assessment Guide No edit summary
• 03:3603:36, 26 March 2025 diff hist +507 Level 3 Assessment Guide →Personnel Security (PS)
• 03:3503:35, 26 March 2025 diff hist +727 Level 3 Assessment Guide →Incident Response (IR)
• 03:3403:34, 26 March 2025 diff hist +1 Level 3 Assessment Guide →Identification and Authentication (IA)
• 03:2603:26, 26 March 2025 diff hist +1,429 Level 3 Assessment Guide →Identification and Authentication (IA)

25 March 2025

• 03:5103:51, 25 March 2025 diff hist +117 Model Overview →System and Information Integrity (SI) current
• 03:5003:50, 25 March 2025 diff hist +39 Model Overview →System and Communications Protection (SC)
• 03:5003:50, 25 March 2025 diff hist +39 Model Overview →Security Assessment (CA)
• 03:4903:49, 25 March 2025 diff hist +273 Model Overview →Risk Assessment (RA)
• 03:4703:47, 25 March 2025 diff hist +76 Model Overview →Incident Response (IR)
• 03:4003:40, 25 March 2025 diff hist +38 Model Overview →Personnel Security (PS)
• 03:4003:40, 25 March 2025 diff hist +76 Model Overview →Identification & Authentication (IA)
• 03:3903:39, 25 March 2025 diff hist +114 Model Overview →Configuration Management (CM)
• 03:3803:38, 25 March 2025 diff hist +76 Model Overview →Awareness & Training (AT)
• 03:3603:36, 25 March 2025 diff hist +223 Model Overview →Personnel Security (PS)
• 03:3603:36, 25 March 2025 diff hist +476 Model Overview →Incident Response (IR)
• 03:2603:26, 25 March 2025 diff hist −32,139 Level 3 Assessment Guide →Identification and Authentication (IA)
• 03:1203:12, 25 March 2025 diff hist +5,520 N Practice CM.L3-3.4.3e Details Created page with "'''Source of Reference: The official [https://dodcio.defense.gov/cmmc/Resources-Documentation/ CMMC Level 3 Assessment Guide] from the Department of Defense Chief Information Officer (DoD CIO).''' For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you. == CM.L3-3.4.3E – AUTOMATED INVENTORY == === SECURITY REQUIREMENT === Employ automated discovery and management tools to maintain an up-to-date, complete, accurat..." current
• 03:1203:12, 25 March 2025 diff hist +7,207 N Practice CM.L3-3.4.2e Details Created page with "'''Source of Reference: The official [https://dodcio.defense.gov/cmmc/Resources-Documentation/ CMMC Level 3 Assessment Guide] from the Department of Defense Chief Information Officer (DoD CIO).''' For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you. === CM.L3-3.4.2E – AUTOMATED DETECTION & REMEDIATION === === SECURITY REQUIREMENT === Employ automated mechanisms to detect misconfigured or unauthorized system c..." current
• 03:1203:12, 25 March 2025 diff hist +5,622 N Practice CM.L3-3.4.1e Details Created page with "'''Source of Reference: The official [https://dodcio.defense.gov/cmmc/Resources-Documentation/ CMMC Level 3 Assessment Guide] from the Department of Defense Chief Information Officer (DoD CIO).''' For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you. == CM.L3-3.4.1E – AUTHORITATIVE REPOSITORY == === SECURITY REQUIREMENT === Establish and maintain an authoritative source and repository to provide a trusted sour..." current
• 03:1103:11, 25 March 2025 diff hist +1,824 Level 3 Assessment Guide →Configuration Management (CM)
• 02:5202:52, 25 March 2025 diff hist −18,944 Level 3 Assessment Guide →Configuration Management (CM)
• 02:4402:44, 25 March 2025 diff hist +6,283 N Practice AT.L3-3.2.2e Details Created page with "'''Source of Reference: The official [https://dodcio.defense.gov/cmmc/Resources-Documentation/ CMMC Level 3 Assessment Guide] from the Department of Defense Chief Information Officer (DoD CIO).''' For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you. == AT.L3-3.2.2E – PRACTICAL TRAINING EXERCISES == === SECURITY REQUIREMENT === Include practical exercises in awareness training for all users, tailored by roles,..." current
• 02:3902:39, 25 March 2025 diff hist +4,593 N Practice AT.L3-3.2.1e Details Created page with "'''Source of Reference: The official [https://dodcio.defense.gov/cmmc/Resources-Documentation/ CMMC Level 3 Assessment Guide] from the Department of Defense Chief Information Officer (DoD CIO).''' For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you. == AT.L3-3.2.1E – ADVANCED THREAT AWARENESS == === SECURITY REQUIREMENT === Provide awareness training upon initial hire, following a significant cyber event, and..." current
• 02:3802:38, 25 March 2025 diff hist −3,971 Level 3 Assessment Guide →Awareness and Training (AT)
• 02:2302:23, 25 March 2025 diff hist −4,608 Level 3 Assessment Guide →Access Control (AC)
• 02:2002:20, 25 March 2025 diff hist 0 Level 3 Assessment Guide →Access Control (AC)
• 02:1902:19, 25 March 2025 diff hist +346 Level 3 Assessment Guide →Access Control (AC)
• 02:1302:13, 25 March 2025 diff hist −473 Practice AC.L3-3.1.3e Details No edit summary current
• 01:5201:52, 25 March 2025 diff hist −1,916 Practice AC.L3-3.1.2e Details No edit summary current
• 00:1100:11, 25 March 2025 diff hist 0 Main Page →Site Update Notices

24 March 2025

• 22:3522:35, 24 March 2025 diff hist −11,066 Level 3 Assessment Guide →Access Control (AC)
• 22:3522:35, 24 March 2025 diff hist +6,752 N Practice AC.L3-3.1.3e Details Created page with "'''Source of Reference: The official [https://dodcio.defense.gov/cmmc/Resources-Documentation/ CMMC Level 3 Assessment Guide] from the Department of Defense Chief Information Officer (DoD CIO).''' For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you. == AC.L3-3.1.3E – SECURED INFORMATION TRANSFER == === SECURITY REQUIREMENT === Employ secure information transfer solutions to control information flows between s..."
• 18:2318:23, 24 March 2025 diff hist +4,372 Practice AC.L3-3.1.2e Details No edit summary
• 17:4617:46, 24 March 2025 diff hist +702 Level 3 Assessment Guide →Access Control (AC)