Skip to content
ExpertCMMC

CMMC 2.13

CMMC Practices

Each practice, grouped by domain and cross-referenced to the NIST controls that support it.

All levelsLevel 1 · FoundationalLevel 2 · AdvancedLevel 3 · Expert

15 practices

AC

Access Control4
AC.L1-b.1.iAuthorized Access Control [FCI Data]L1AC.L1-b.1.iiTransaction & Function Control [FCI Data]L1AC.L1-b.1.iiiExternal Connections [FCI Data]L1AC.L1-b.1.ivControl Public Information [FCI Data]L1

IA

Identification & Authentication2
IA.L1-b.1.vIdentification [FCI Data]L1IA.L1-b.1.viAuthentication [FCI Data]L1

MP

Media Protection1
MP.L1-b.1.viiMedia Disposal [FCI Data]L1

PE

Physical Protection2
PE.L1-b.1.viiiLimit Physical Access [FCI Data]L1PE.L1-b.1.ixManage Visitors & Physical Access [FCI Data]L1

SC

System & Communications Protection2
SC.L1-b.1.xBoundary Protection [FCI Data]L1SC.L1-b.1.xiPublic-Access System Separation [FCI Data]L1

SI

System & Information Integrity4
SI.L1-b.1.xiiFlaw Remediation [FCI Data]L1SI.L1-b.1.xiiiMalicious Code Protection [FCI Data]L1SI.L1-b.1.xivUpdate Malicious Code Protection [FCI Data]L1SI.L1-b.1.xvSystem & File Scanning [FCI Data]L1

Looking for the underlying standards? Browse NIST SP 800-171, 800-172 & 800-53 →

CMMC 2.13 Practices — L1 | Expert CMMC