NIST SP 800-171 & CMMC 2.0 Control 3.12.1 Requirement:

Periodically assess the security controls in organizational systems to determine if the controls are effective in their application.

NIST SP 800-171 & CMMC 2.0 3.12.1 Requirement Explanation:

By assessing your security controls you can identify issues before an attacker can exploit them.

Example NIST SP 800-171 & CMMC 2.0 3.12.1 Implementation:

By undergoing this gap analysis your are meeting this control. Your security controls are being assessed for their effectiveness and gaps are identified. You should periodically (e.g., annually) assess your security controls and make improvements as needed. The assessments can be conducted internally, you are not required to hire a third party.

NIST SP 800-171 & CMMC 2.0 3.12.1 Scenario(s):

- Scenario 1:

Your company wants to determine the effectiveness of its cybersecurity program which is built to meet CMMC requirements. As part of your security assessment, you review your system secuirty plan to ensure that the controls you have implemented are sufficient for meeting your security goals.

Discover Our NIST SP 800-171 & CMMC 2.0 Solutions:


Compliance Accelerator

Power through compliance. Meet and maintain your NIST SP 800-171 & CMMC 2.0 compliance requirements.

Quantum Assessor

Transform your business. Create new revenue streams and provide scalability for your NIST SP 800-171 and CMMC 2.0 services.

Supply Chain Verifier

Trust is everything. Verify, monitor, and support subcontactor compliance.