Step 1 of 3: Identity
CMMC 2.0
Phase 2 · Technical controlsAutomated evidence collectors, cloud service provider connectors, and external API fabric.
Basis: Continuous Telemetry Assessment Protocol
/cmmc/integrationDoD Cybersecurity Maturity Model Certification (CMMC 2.0 / NIST SP 800-171)
3 steps, completed in order. Each step is validated against the schema before the next unlocks.
Step 1 of 3
Complete the Identity fields. Each value is validated against the schema before the next step unlocks.
Domain entity ID (required)
entityIdThe organisation or system this record is about — lowercase with dashes, e.g. acme-corp-hq. Pick one you have used before, or type a new id to create it.
Step 2 of 3
Complete the Connector fields. Each value is validated against the schema before the next step unlocks.
Connector (required)
connectorNameEnter connector.
System type (required)
connectorTypeEnter system type.
Environment (required)
modeThe same connector in sandbox and production has very different blast radius.
Authenticationoptional
authMethodEnter authentication.
Step 3 of 3
Complete the Routing fields. Each value is validated against the schema before the next step unlocks.
Data flow (required)
directionEnter data flow.
Patternoptional
integrationPatternEnter pattern.
Data in scopeoptional
dataScopeNotesEnter data in scope.
Continue with the next guide in this framework's table of contents.
110 security requirements across 14 control families, SPRS scoring, and C3PAO review.
Read guide Phase 2 · Technical controls24 advanced protection practices against Advanced Persistent Threats (APTs) and DIBCAC review.
Read guide Phase 2 · Technical controlsEvidence packets indexed to NIST 800-171A assessment objectives with assessor review determinations.
Read guide