Sign in Register

CMMC 2.13

CMMC Practices

Each practice, grouped by domain and cross-referenced to the NIST controls that support it.

All levels Level 1 · Foundational Level 2 · Advanced Level 3 · Expert

Domain: RA — Risk Assessmentclear ✕

10 practices

RA

Risk Assessment10

RA.L2-3.11.1Risk Assessments1 refL2 RA.L2-3.11.2Vulnerability Scan1 refL2 RA.L2-3.11.3Vulnerability Remediation1 refL2 RA.L3-3.11.1eThreat-Informed Risk AssessmentL3 RA.L3-3.11.2eThreat HuntingL3 RA.L3-3.11.3eAdvanced Risk IdentificationL3 RA.L3-3.11.4eSecurity Solution RationaleL3 RA.L3-3.11.5eSecurity Solution EffectivenessL3 RA.L3-3.11.6eSupply Chain Risk ResponseL3 RA.L3-3.11.7eSupply Chain Risk PlanL3

Looking for the underlying standards? Browse NIST SP 800-171, 800-172 & 800-53 →