CMMC 1.0 Practice AU.2.043 Requirement:

Provide a system capability that compares and synchronizes internal system clocks with an authoritative source to generate time stamps for audit records.

CMMC 1.0 AU.2.043 Requirement Explanation:

To keep accurate audit records your systems must keep accurate time. Over time, systems clocks become inaccurate. By configuring your systems to sync with an authoritative time server (e.g. NIST Time Servers) you can prevent this.

Example CMMC 1.0 AU.2.043 Implementation:

Configure the time settings on your systems to sync with the NIST time server. If you have a local time server on your network you can sync it with the NIST time server and sync your other systems with your time server.

CMMC 1.0 AU.2.043 Scenario(s):

- Scenario 1:

Alice is a system administrator who maintains her small company's computers. She wants to ensure that her Windows 10 workstations keep accurate time. To do this she configures them to sync with NIST's Time Server. She located the IP address for the time server on the NIST Internet Time Server website.

- Scenario 2:

Bill is a system administrator who maintains his company's IT infrastructure. His network has several servers including a time server, network devices, and dozens of workstations. The systems on his network are already synced to his time server however the time given by the time server is about 15 seconds behind. To resolve this, Bill syncs his time server with a NIST time server.
 

Quick & Simple

Discover Our Cybersecurity Compliance Solutions:

Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you

 NIST SP 800-171 & CMMC Compliance App

NIST SP 800-171 & CMMC Compliance

Become compliant, provide compliance services, or verify partner compliance with NIST SP 800-171 and CMMC requirements.
 HIPAA Compliance App

HIPAA Compliance

Become compliant, provide compliance services, or verify partner compliance with HIPAA security rule requirements.
 FAR 52.204-21 Compliance App

FAR 52.204-21 Compliance

Become compliant, provide compliance services, or verify partner compliance with FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems requirements.
 ISO 27001 Compliance App

ISO 27001 Compliance

Become compliant, provide compliance services, or verify partner compliance with ISO 27001 requirements.