CMMC 1.0 Practice AC.1.004 Requirement:
Control information posted or processed on publicly accessible information systems.
CMMC 1.0 AC.1.004 Requirement Explanation:
A company may accidentally post “Federal Contract Information” (FCI) or “Controlled Unclassified Information” (CUI) to its website, social media, or other public location. To prevent this only authorized persons should be allowed to post information publicly. Content like press releases and blog articles may contain “Federal Contract Information” (FCI) or “Controlled Unclassified Information” (CUI). They should be reviewed prior to posting.
Example CMMC 1.0 AC.1.004 Implementation:
Only allow authorized persons to post information on to your company website and social media. Review information to identify federal contract information and or controlled unclassified information before it is posted.
CMMC 1.0 AC.1.004 Scenario(s):
- Scenario 1:
Your organization won a federal contract. To advertise this achievement your marketing team prepares a press release. Before posting the press release to your website it is reviewed to identify any “Federal Contract Information” (FCI) or “Controlled Unclassified Information” (CUI).
Quick & Simple
Discover Our Cybersecurity Compliance Solutions:
Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you
NIST SP 800-171 & CMMC Compliance
Become compliant, provide compliance services, or verify partner compliance with NIST SP 800-171 and CMMC requirements.
HIPAA Compliance
Become compliant, provide compliance services, or verify partner compliance with HIPAA security rule requirements.
FAR 52.204-21 Compliance
Become compliant, provide compliance services, or verify partner compliance with FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems requirements.
ISO 27001 Compliance
Become compliant, provide compliance services, or verify partner compliance with ISO 27001 requirements.