CMMC 1.0 Domain:System and Information Integrity; Documentation and Requirements

CMMC 1.0 Practice - SI.1.210

Identify, report, and correct information and information system flaws in a timely manner.

Provide protection from malicious code at appropriate locations within organizational information systems.

Update malicious code protection mechanisms when new releases are available.

Perform periodic scans of the information system and real-time scans of files from external sources as files are downloaded, opened, or executed.

Monitor system security alerts and advisories and take action in response.

Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks.

Identify unauthorized use of organizational systems.

Employ spam protection mechanisms at information system access entry and exit points.

Implement email forgery protections.

Utilize email sandboxing to detect or block potentially malicious email attachments.