Executive Summary
CMMC objective AC.L2-3.14.3[a] requires organizations to identify, review and act on information system anomalies. Implement monitoring to detect unusual activity patterns. Leadership must confirm detection mechanisms and escalation procedures.