YouAttest GRC Survey for CMMC 2.0 YouAttest is a certified identity re-certification tool that automates identity governance. This survey will help determine if your security and governance would improve with YouAttest. Does your organization limit system access to authorized users, processes, or devices? CMMC Standard AC.L1-3.1.1Limit system access to authorized users, processes acting on behalf of authorized users, or devices (including other systems). [FAR 52.204-21(b)(1)(i)] Please select your answer Yes No Does your organization control the types of transactions and functions that authorized users are permitted to execute? CMMC Standard AC.L1-3.1.2Limit system access to the types of transactions and functions that authorized users are permitted to execute. [FAR 52.204-21(b)(1)(ii)] Please select your answer Yes No Does your organization identify system users, processes, and devices before granting access? CMMC Standard IA.L1-3.5.1Identify information system users, processes acting on behalf of users, or devices. [FAR 52.204-21(b)(1)(viii)] Please select your answer Yes No Does your organization limit information system access to authorized users and processes acting on their behalf? CMMC Standard AC.L2-3.1.1Limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems). [NIST SP 800-171 R2] Please select your answer Yes No Does your organization enforce the principle of least privilege, ensuring users only have access necessary for their roles? CMMC Standard AC.L2-3.1.5Employ the principle of least privilege, including for specific security functions and privileged accounts. [NIST SP 800-171 R2] Please select your answer Yes No Does your organization periodically review and update access permissions to ensure they remain appropriate? CMMC Standard AC.L2-3.1.6Review and update access permissions periodically to ensure that they are appropriate. [NIST SP 800-171 R2] Please select your answer Yes No Does your organization periodically review accounts for compliance with account management requirements? CMMC Standard IA.L2-3.5.4Periodically review accounts for compliance with account management requirements. [NIST SP 800-171 R2] Please select your answer Yes No Does your organization create and retain system audit logs to enable monitoring and analysis of access activities? CMMC Standard AU.L2-3.3.1Create and retain system audit records to the extent needed to enable the monitoring, analysis, investigation, and reporting of unlawful or unauthorized system activity. [NIST SP 800-171 R2] Please select your answer Yes No Does your organization implement automated mechanisms to restrict access to critical systems based on risk assessments? CMMC Standard AC.L3-3.1.22eImplement automated mechanisms to restrict access to critical systems and information based on risk assessments. [NIST SP 800-172 Please select your answer Yes No Does your organization review and update role-based access controls to ensure compliance with security policies? CMMC Standard AC.L3-3.1.20eReview and update role-based access control policies and procedures to ensure compliance with security requirements. [NIST SP 800-172] Please select your answer Yes No 1 out of 10 Thank you for completing the CMMC 2.0 Assessment! Your responses have been successfully recorded, and your personalized results are now available. Below, you’ll find your overall score along with a detailed breakdown of key controls that may require attention. Use these insights to strengthen and refine your security posture. Important: Please fill out the contact form below, to retrieve your full results and in-depth analysis. Name Email Business Phone GRC Partner Email (optional) Time's up
