CMMC V2.13

[RobertoQ]

Cybersecurity Maturity Model Certification (CMMC) Version 2.13, published in September 2024, provides the detailed implementation guidance for the CMMC 2.0 framework. While CMMC 2.0 defines the overall structure, maturity levels, and objectives for protecting sensitive information, Version 2.13 specifies how these requirements are applied in practice. CMMC 2.13 aligns closely with FAR 52.204-21 (basic safeguarding), NIST SP 800-171 Rev 2 (CUI protection), and selected controls from NIST SP 800-172 (enhanced security). This ensures organizations implement the right controls based on the sensitivity of the information they manage.

[the_rock]

Gotta try it next week in the lab.

[RobertoQ]

Good deal, have you tried policy insights yet?

[the_rock]

No...whats that?

[RobertoQ]

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_SecurityManagement_AdminGuide/Cont...

Check it out. You can try it out from the infinity portal.

[the_rock]

Just read it, might try in the lab. Little surprised at these limitations...

Known Limitations

Policy Insights only analyzes rules that meet these criteria:

• The Action is Accept, Ask, or Inform.

• The Track column is not set to None.

• To create insights in the Source and Destination columns, objects in these columns must be of type Any, Host, Network, Group and Security Gateways / Security Clusters (using IPv4).

• Insights that modify the Services & Applications column require that this column contains only these types of objects: tcp/udp services, icmp, rpc and dce-rpc.

• In a Multi-Domain environment, only Domainrules are analyzed.

[RobertoQ]

It was recently released in Q3, and many improvements are in the pipeline. PM me with your feedback once you kick the tires, I'll make sure and pass it along.

[the_rock]

Regardless, looks interesting.

[the_rock]

Just curious, I guess its not version related? Probably works in R81.xx verdions?

[RobertoQ]

R81.20 Take 99 or newer

[the_rock]

Thank you!