CMMC 2.0 • LEVEL 1 • ACCESS CONTROL

AC.L1-3.1.22Publicly Accessible Content

Train authorized individuals to ensure that publicly accessible information does not contain CUI. Review the content on publicly accessible systems for CUI and remove such information, if discovered.

NIST 800-171 Mapping

NIST 800-53 Controls

Assessment Objectives

  • authorized individuals are trained to ensure that publicly accessible information does not contain CUI.
  • the content on publicly accessible systems is reviewed for CUI.
  • CUI is removed from publicly accessible systems, if discovered.

Practitioner Notes

Practitioner commentary coming soon.