Step 1 of 3: Identity
CMMC 2.0
Phase 3 · Evidence & auditAutomated boundary misalignment scans between CUI enclaves, security protection assets, and rules.
Basis: Control Anomaly Detection & Remediation
/cmmc/misalignmentDoD Cybersecurity Maturity Model Certification (CMMC 2.0 / NIST SP 800-171)
3 steps, completed in order. Each step is validated against the schema before the next unlocks.
Step 1 of 3
Complete the Identity fields. Each value is validated against the schema before the next step unlocks.
Domain entity ID (required)
entityIdThe organisation or system this record is about — lowercase with dashes, e.g. acme-corp-hq. Pick one you have used before, or type a new id to create it.
Step 2 of 3
Complete the Change fields. Each value is validated against the schema before the next step unlocks.
Control (required)
controlIdEnter control.
Where it appears (required)
sourceEnter where it appears.
Change kindoptional
mappingStatusHow this control differs between the enforceable baseline and the one being applied.
Step 3 of 3
Complete the Impact fields. Each value is validated against the schema before the next step unlocks.
What the enforceable baseline requiresoptional
currentBaselineExpectationEnter what the enforceable baseline requires.
What was actually appliedoptional
appliedInterpretationEnter what was actually applied.
Resolutionoptional
resolutionNotesEnter resolution.
Continue with the next guide in this framework's table of contents.
Immutable evidence custody, SHA-256 integrity verification, and custody transition locking.
Read guide Phase 3 · Evidence & auditImmutable cryptographic hash chains linking evidence items to executive attestation verdicts.
Read guide Phase 3 · Evidence & auditTelemetry collection for assessment compute tokens, verification runs, and tenant billing limits.
Read guide