CMMC 1.0 Practice AC.1.004 Requirement:

Control information posted or processed on publicly accessible information systems.

CMMC 1.0 AC.1.004 Requirement Explanation:

A company may accidentally post “Federal Contract Information” (FCI) or “Controlled Unclassified Information” (CUI) to its website, social media, or other public location. To prevent this only authorized persons should be allowed to post information publicly. Content like press releases and blog articles may contain “Federal Contract Information” (FCI) or “Controlled Unclassified Information” (CUI). They should be reviewed prior to posting.

Example CMMC 1.0 AC.1.004 Implementation:

Only allow authorized persons to post information on to your company website and social media. Review information to identify federal contract information and or controlled unclassified information before it is posted.

CMMC 1.0 AC.1.004 Scenario(s):

- Scenario 1:

Your organization won a federal contract. To advertise this achievement your marketing team prepares a press release. Before posting the press release to your website it is reviewed to identify any “Federal Contract Information” (FCI) or “Controlled Unclassified Information” (CUI).

Discover Our NIST SP 800-171 & CMMC 2.0 Solutions:


Compliance Accelerator

Power through compliance. Meet and maintain your NIST SP 800-171 & CMMC 2.0 compliance requirements.

Quantum Assessor

Transform your business. Create new revenue streams and provide scalability for your NIST SP 800-171 and CMMC 2.0 services.

Supply Chain Verifier

Trust is everything. Verify, monitor, and support subcontactor compliance.