AC.L2-3.14.5[b] — System & Information Integrity (System & File Scanning)Domain: System & Information Integrity (SI) | Practice: SI.L2-3.14.5 | Objective ID: 3.14.5[b] | Source: NIST SP 800-171 Rev. 2 / CMMC 2.0 Level 2 | Assessment Objective: The system is scanned at the defined frequency. |
Executive Summary
CMMC objective AC.L2-3.14.5[b] requires executing system scans at the defined frequency. For organizations that handle Controlled Unclassified Information (CUI), this objective is part of the foundation that every downstream control depends on.