CM-7(3)

Requirement

Ensure compliance with [Assignment: organization-defined registration requirements for functions, ports, protocols, and services].

Discussion

Organizations use the registration process to manage, track, and provide oversight for systems and implemented functions, ports, protocols, and services.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System security plan; configuration management policy; procedures addressing least functionality in the system; configuration management plan; system configuration settings and associated documentation; system component inventory; audit and compliance reviews; system audit records; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with security responsibilities; system/network administrators; system developers].

Test

[SELECT FROM: Organizational processes ensuring compliance with registration requirements for functions, ports, protocols, and/or services; mechanisms implementing compliance with registration requirements for functions, ports, protocols, and/or services].

CMMC Training

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!