CMMC Level 2

System and Communications Protection Controls

Controls for monitoring, controlling, and protecting communications at the external and key internal boundaries of organizational systems.

CMMC Registered Practitioner Team 16 Controls in Family 3.13 30+ Years Experience

About the System and Communications Protection Family (SC)

Controls for monitoring, controlling, and protecting communications at the external and key internal boundaries of organizational systems. This family contains 16 security requirements that organizations must implement to achieve CMMC Level 2 certification and protect Controlled Unclassified Information (CUI). Petronella Technology Group's team of CMMC Registered Practitioners provides expert guidance on implementing every control in this family.

CMMC Level 2 - System and Communications Protection Controls

All 16 System and Communications Protection controls with CMMC-focused implementation guidance.

3.13.1Monitor and Protect Communications at Boundaries→ 3.13.2Employ Architectural Designs and Techniques for Security→ 3.13.3Separate User Functionality from System Management→ 3.13.4Prevent Unauthorized Information Transfer→ 3.13.5Implement Subnetworks for Publicly Accessible Components→ 3.13.6Deny Network Traffic by Default→ 3.13.7Prevent Remote Devices from Split Tunneling→ 3.13.8Implement Cryptographic Mechanisms for CUI in Transit→ 3.13.9Terminate Network Connections at End of Sessions→ 3.13.10Establish and Manage Cryptographic Keys→ 3.13.11Employ FIPS-Validated Cryptography→ 3.13.12Prohibit Remote Activation of Collaborative Computing Devices→ 3.13.13Control and Monitor Use of Mobile Code→ 3.13.14Control and Monitor Use of VoIP→ 3.13.15Protect Authenticity of Communications Sessions→ 3.13.16Protect CUI at Rest→

NIST SP 800-171 - System and Communications Protection Requirements

The same 16 controls with NIST 800-171-focused assessment preparation guidance.

3.13.1Monitor and Protect Communications at Boundaries→ 3.13.2Employ Architectural Designs and Techniques for Security→ 3.13.3Separate User Functionality from System Management→ 3.13.4Prevent Unauthorized Information Transfer→ 3.13.5Implement Subnetworks for Publicly Accessible Components→ 3.13.6Deny Network Traffic by Default→ 3.13.7Prevent Remote Devices from Split Tunneling→ 3.13.8Implement Cryptographic Mechanisms for CUI in Transit→ 3.13.9Terminate Network Connections at End of Sessions→ 3.13.10Establish and Manage Cryptographic Keys→ 3.13.11Employ FIPS-Validated Cryptography→ 3.13.12Prohibit Remote Activation of Collaborative Computing Devices→ 3.13.13Control and Monitor Use of Mobile Code→ 3.13.14Control and Monitor Use of VoIP→ 3.13.15Protect Authenticity of Communications Sessions→ 3.13.16Protect CUI at Rest→
All CMMC Families
AC: Access Control AT: Awareness and Training AU: Audit and Accountability CM: Configuration Management IA: Identification and Authentication IR: Incident Response MA: Maintenance MP: Media Protection PS: Personnel Security PE: Physical Protection RA: Risk Assessment CA: Security Assessment SC: System and Communications Protection SI: System and Information Integrity

Need Help With System and Communications Protection Controls?

Our team of CMMC Registered Practitioners helps organizations implement these controls and pass assessments.

Schedule a Compliance Assessment Calculate your SPRS score