CMMC 2.0 Control PE.L1-3.10.5 - Control and manage physical access devices
CMMC 2.0 Control PE L2-3.10.1 - Limit physical access to organizational systems, equipment, and the
CMMC 2.0 Control PE.L2-3.10.6 - Enforce safeguarding measures for CUI at alternate work sites
CMMC 2.0 Control PE.L2-3.10.2 - Protect and monitor the physical facility and support infrastructure
CMMC 2.0 Control PE.L1-3.10.4 - Maintain audit logs of physical access
CMMC 2.0 Control IA.L2-3.5.10 - Store and transmit only cryptographically-protected passwords.
CMMC 2.0 Control MP.L2-3.8.5 - Control access to media containing CUI and maintain accountability
CMMC 2.0 Control MP.L2-3.8.7 - Control the use of removable media on system components
CMMC 2.0 Control CA L2-3.12.1: Assessing Security Controls and Risk Management
CMMC 2.0 Control IA L2-3.5.5 - Prevent reuse of identifiers for a defined period.
CMMC 2.0 Control IA.L1-3.5.2: Authenticate and Verify Access
CMMC 2.0 Control AU.L2-3.3.6 - Efficient Audit Record Reduction and On-Demand Report Generation
CMMC 2.0 Control MP.L2-3.8.2 - Limit access to CUI on system media to authorized users.
CMMC 2.0 Control AC.L2-3.1.12: Monitor & Control Remote Access Sessions
CMMC 2.0 Control IA.L2-3.5.4 - Employ replay-resistant authentication mechanisms for network access
CMMC 2.0 Control RA.L2-3.11.1 - Periodically assess the risk to organizational operations
CMMC 2.0 Control MP.L2-3.8.1 - Protect (i.e., physically control and securely store) system media
CMMC 2.0 Control SC L2-3.13.6 - Deny network communications traffic by default and allow network
CMMC 2.0 Control MA L2-3.7.2 - Provide controls on the tools, techniques, mechanisms, and personnel
CMMC 2.0 Control AU.L2-3.3.1- Essential Audit Logs: Monitoring and Reporting System Activity