FAR 52.204-21 / CMMC 2.0 Level 1 Handbook

• Access Control

  Ensure that only authorized persons can access your systems and information.

  4 controls

• Identification and Authentication

  Properly verify the identities of users, processes, and devices before allowing them to access your systems and information.

  2 controls

• Media Protection

  Protect the confidentiality and integrity of digital media (e.g. hard drives) and non-digital media (e.g. paper).

  1 control

• Physical Protection

  Protect your facilities, personnel, and systems from physical threats such as unauthorized facility access.

  2 controls

• System and Communications Protections

  Implement encrypted communications and control communications to protect your data.

  2 controls

• System and Information Integrity

  Keep your systems updated with security patches to prevent malware infections, ensure that you have anti-malware software deployed and secure your email systems.

  4 controls

Need help putting this into practice? See our CMMC Level 1 compliance services or read our CMMC Level 1 articles.