Executive Summary
CMMC objective AC.L2-3.14.1[c] requires organizations to install system firmware updates within specified timeframes. Define firmware patching SLAs and ensure device inventory tracking. Leadership must confirm update schedules and compliance evidence.