RA.L3-3.11.1e  

Reference: CMMC 2.11

Family: RA

Level Introduced: 3

Title: Threat-Informed Risk Assessment

Practice:
Employ threat intelligence, at a minimum from open or commercial sources, and any DoD-provided sources, as part of a risk assessment to guide and inform the development of organizational systems, security architectures, selection of security solutions, monitoring, threat hunting, and response and recovery activities.

Source: CMMC v2.0