When educating people on a complex, multi-dimensional topic, the best place to start is with its key, foundational information. That’s exactly what Celerium’s Certified CMMC Professional Course (CCP) does – it conveys the fundamental knowledge needed to train professionals supporting the implementation of CMMC.
Access Control (AC)
Audit & Accountability (AU)
Awareness & Training (AT)
Configuration Management (CM)
Identification & Authentication (IA)
Incident Response (IR)
Maintenance (MA)
Media Protection (MP)
Personnel Security (PS)
Physical Protection (PE)
Risk Assessment (RA)
Security Assessment (CA)
Systems & Communications Protection (SC)
System & Information Integrity (SI)
Sponsored by Celerium
Sponsored by Celerium
These online-only courses provide CMMC training to companies looking to comply with CMMC. The courses are created by an experienced team of cybersecurity implementers with years of experience on NIST standards.
Implementing CMMC will be different for every company. And with the U.S. government doubling down on cybersecurity, it's important to get it right. So where is the best place to start?
Our CMMC Insights courses were created to help companies looking to comply with CMMC understand how to implement the practices. Our team has years of experience implementing NIST 800-53.
One-year access to the learning portal is provided, and we will provide updates on changes to CMMC as clarity is provided on items such as reciprocity. Don't wait -- get started on your CMMC assessment preparation now.
DOMAIN: Identification and Authentication |
Practice:IA.L2-3.5.10
|
CAPABILITY: C015 Grant access to authenticated entities
|
Store and transmit only cryptographically-protected passwords. |
Assessment NOTES: A CMMC assessor may want to review, observe, or test the following
· Security Plan, procedures or processes related to identification and authentication to determine if passwords are encrypted in storage and in transmission.
· Evidence that passwords are prevented from being stored in reversible encryption.
· Evidence that passwords are stored as one-way hash constructed from the password itself.
This practice ensures that only encrypted representation of passwords is stored and transmitted. For most systems and operating systems, vendor documentation will explain and address how the passwords are stored and encrypted in transit.
Click here to see details
Practice:IA.L2-3.5.11
|
CAPABILITY: C015 Grant access to authenticated entities
|
Obscure feedback of authentication information. |
Assessment NOTES: A CMMC assessor may want to review, observe, or test the following
Logon process and validate feedback is obscured during authentication.
Click here to see details (additional assessment notes available)
Copyright © 2022 Celerium. All Rights Reserved.