CMMC 1.0 Practice SI.2.214 Requirement:
Monitor system security alerts and advisories and take action in response.
CMMC 1.0 SI.2.214 Requirement Explanation:
System security alerts and advisories refer to alerts given by groups such as the US-CERT or a manufacturer generally regarding security vulnerabilities. Subscribing to these alerts allows companies to react quickly to new security vulnerabilities.
Example CMMC 1.0 SI.2.214 Implementation:
Signup for email distributions that provide you with cybersecurity alerts and advisories. By signing up to the US-CERT "Alerts" mailing list you can meet this control. The alerts provide useful information on newly discovered vulnerabilities. If one of the alerts is relevant to your company you need to take action.
CMMC 1.0 SI.2.214 Scenario(s):
- Scenario 1:
You want to receive alerts on the latest system security vulnerabilities. To accomplish this you sign up for the US-CERT's alert emails.
Quick & Simple
Discover Our Cybersecurity Compliance Solutions:
Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you