CMMC Support for Check Point Compliance Blade

[RobertoQ]

What is CMMC?

The Cybersecurity Maturity Model Certification (CMMC) is a certification and compliance process developed by the Department of Defense (DoD). It is designed to certify that contractors have the controls in place to protect sensitive data.

The CMMC establishes five certification levels that reflect the maturity and reliability of a company's cyber security infrastructure to safeguard sensitive government information on contractors' information systems. The five levels are tiered and build upon each other's technical requirements. Each level requires compliance with the lower-level requirements and institutionalization of additional processes to implement specific cyber security based practices.

Target Audience?

DoD contractors, required to learn the standard and follow the required guidelines and comply.

How can Check Point help?

Check Point Compliance Software Blade monitors the customer’s Check Point environment against a library of security best practices, highlighting poor configuration settings and security weaknesses. Security best practices are mapped to major regulations (like CMMC), translating complex regulatory requirements into security terms. This enables network security managers to easily generate detailed audit-ready compliance reports, allowing them to focus on security improvements and increasing compliance level.

The following blades and configurations need to be enabled to get the full Standard coverage:

• Anti Bot
• Anti Spam & Mail
• Anti Virus
• Application Control
• URL filtering
• DLP
• Identity Awareness
• Gateway Properties Configuration
• Gateway Operating System Configuration
• Firewall Rule Base Configuration
• Firewall and Management Configuration
• IPS Configuration
• VPN Configuration
• Threat Emulation

The Check Point DLP blade can enable the below controls and Check Point Compliance controls has the proper validation process for it.

In addition, there are few other Check Point solutions (i.e.: endpoint suite), which can also be of assistance to enterprises in need to comply with this standard.

How do I apply CMMC support to my Compliance Blade?

1. Download the attached file Cybersecurity Maturity Model Certification.zip and save it to your local drive
2. Open SmartConsole and click on “Manage and Settings”

3. Under Compliance click on “Settings”

4. In the settings window select Actions>Import

5. Select the downloaded XML file and click “open”

6. The new regulation will now import

7. Click “Rescan” in order to scan the new regulations.

8. CMMC should now appear in the main dashboard of the compliance blade

Additional details can be found on CP_Cyber Security Maturity Model Certification.pdf (attached)