CMMC Practice Requirement:
Control information posted or processed on publicly accessible information systems.
CMMC Requirement Explanation:
A company may accidentally post “Federal Contract Information” (FCI) or “Controlled Unclassified Information” (CUI) to its website, social media, or other public location. To prevent this only authorized persons should be allowed to post information publicly. Content like press releases and blog articles may contain “Federal Contract Information” (FCI) or “Controlled Unclassified Information” (CUI). They should be reviewed prior to posting.
Example CMMC Implementation:
Only allow authorized persons to post information on to your company website and social media. Review information to identify federal contract information and or controlled unclassified information before it is posted.
- Scenario 1:
Your organization won a federal contract. To advertise this achievement your marketing team prepares a press release. Before posting the press release to your website it is reviewed to identify any “Federal Contract Information” (FCI) or “Controlled Unclassified Information” (CUI).
Discover Our NIST SP 800-171 Solutions:
For contractors seeking compliance
For IT service providers
Supply Chain Verifier
For contractors seeking to verify partner compliance