Please answer these simple 10 questions.

This survey will help determine if your security and governance would improve with YouAttest.

Does your organization limit system access to authorized users, processes, or devices? CMMC Standard AC.L1-3.1.1

Yes

Limit system access to authorized users, processes acting on behalf of authorized users, or devices (including other systems). [FAR 52.204-21(b)(1)(i)]

Does your organization control the types of transactions and functions that authorized users are permitted to execute? CMMC Standard AC.L1-3.1.2

Yes

Limit system access to the types of transactions and functions that authorized users are permitted to execute. [FAR 52.204-21(b)(1)(ii)]

Does your organization identify system users, processes, and devices before granting access? CMMC Standard IA.L1-3.5.1

Yes

Identify information system users, processes acting on behalf of users, or devices. [FAR 52.204-21(b)(1)(viii)]

Does your organization limit information system access to authorized users and processes acting on their behalf? CMMC Standard AC.L2-3.1.1

Yes

Limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems). [NIST SP 800-171 R2]

Does your organization enforce the principle of least privilege, ensuring users only have access necessary for their roles? CMMC Standard AC.L2-3.1.5

Yes

Employ the principle of least privilege, including for specific security functions and privileged accounts. [NIST SP 800-171 R2]

Does your organization periodically review and update access permissions to ensure they remain appropriate? CMMC Standard AC.L2-3.1.6

Yes

Review and update access permissions periodically to ensure that they are appropriate. [NIST SP 800-171 R2]

Does your organization periodically review accounts for compliance with account management requirements? CMMC Standard IA.L2-3.5.4

Yes

Periodically review accounts for compliance with account management requirements. [NIST SP 800-171 R2]

Does your organization create and retain system audit logs to enable monitoring and analysis of access activities? CMMC Standard AU.L2-3.3.1

Yes

Create and retain system audit records to the extent needed to enable the monitoring, analysis, investigation, and reporting of unlawful or unauthorized system activity. [NIST SP 800-171 R2]

Does your organization implement automated mechanisms to restrict access to critical systems based on risk assessments? CMMC Standard AC.L3-3.1.22e

Yes

Implement automated mechanisms to restrict access to critical systems and information based on risk assessments. [NIST SP 800-172]

Does your organization review and update role-based access controls to ensure compliance with security policies? CMMC Standard AC.L3-3.1.20e

Yes

Review and update role-based access control policies and procedures to ensure compliance with security requirements. [NIST SP 800-172]

Full Name *

Email *

Phone *

Business *

GRC Partner Email(Optional)

I agree to terms & conditions provided by the company. By providing my phone number, I agree to receive text messages from the business.

Bot protection