AC.L2-3.13.2[b] — System & Communications Protection (Security Engineering)Domain: System & Communications Protection (SC) | Practice: SC.L2-3.13.2 | Objective ID: 3.13.2[b] | Source: NIST SP 800-171 Rev. 2 / CMMC 2.0 Level 2 | Assessment Objective: Security engineering principles are employed in the design of the system. |
Executive Summary (For Leadership and the Board)
CMMC objective AC.L2-3.13.2[b] — Security engineering principles are employed in the design of the system. Incorporate security architecture into system design — network segmentation, encrypted communications, secure authentication flows, and hardened configurations from the start.