Executive Summary
CMMC objective AC.L2-3.14.2[a] requires organizations to monitor systems for malicious code and respond appropriately. Implement malware detection and response procedures. Leadership must confirm scanning tools are deployed and monitored.