CMMC L2 Control Mapping Brief

CMMC Level 2 aligns to NIST SP 800-171 controls for protecting CUI. Aegis maps Access Control, Audit and Accountability, Identification and Authentication, Incident Response, and Media Protection practices to the policies and runbooks in this workspace.

Assessment evidence for AC, AU, IA, IR, and MP families lives in Policies & CUI and Runbooks collections. Vector search surfaces the controlling procedure for each practice during readiness reviews.