ResourcesResources
Resources: checklists and control mappings, no gate
Resources are the working documents PolicyCortex publishes without a form or a gate: the CMMC Level 2 readiness checklist across all 110 NIST 800-171 requirements, and the control mapping from those requirements to AWS, Azure, and GCP configuration. Each is a dated reference to work from, not a substitute for the assessment itself.
2 entries
Documents, newest first
- CMMC Level 2 Readiness Checklist [Free Download]A practitioner-built CMMC Level 2 readiness checklist covering all 17 control families and 110 NIST 800-171 requirements.
- NIST 800-171 to Cloud Control Mapping: AWS, Azure, and GCPComplete mapping of all 110 NIST 800-171 Rev 2 controls to specific cloud configuration requirements across AWS, Azure, and GCP.
Related records
Guides and articles describe the work. The evidence that work produces is described in three proof pages and one architecture page.
- proof.state
- Proof of State. What the environment was, as of a date someone else picks: point-in-time records, content hashed and chained.
- proof.change
- Proof of Change. Who or what altered the environment, under what authority, with before and after state hashes.
- proof.agency
- Proof of Agency. What a machine was permitted to do before it acted, what it did, and what would have stopped it.
- architecture
- Architecture. How the chain is built and where it lives: inside your tenant, with no egress of evidence.
Work the checklist. Then keep the evidence it asks for.