Example, read only. A sample account that shows what finished CMMC looks like.
Safeguard 13 of 15 · SI.L1-b.1.xiii
SI.L1-3.14.2 · FAR 52.204-21 (b)(1)(xiii) · NIST SP 800-171 3.14.2
Malicious Code Protection
Provide protection from malicious code at appropriate locations within organizational information systems
What it means
Run antivirus / anti-malware on your computers and email server.
Why it matters
Defender is built into Windows and is sufficient for L1 if it's actually on. macOS has XProtect. The question primes ask: show me it's running on every covered device.
How to do it, Microsoft 365 / Defender
- 1Go to security.microsoft.com → Assets → Devices
- 2Screenshot the inventory showing antivirus status per device
- 3For a representative device, screenshot Windows Security → Virus & threat protection showing it is active
Capture: Device-inventory screenshot plus per-device protection status.
The proof on file
- defender-endpoint-health-report.pdfReviewed, sufficient
Every file is checked by Charlie the moment it is uploaded, so a gap is caught on the spot, not at the assessment.
The narrative on file
Microsoft Defender Antivirus runs on every managed workstation with real time protection on and enforced by Intune policy. The endpoint protection report on file shows all covered devices reporting healthy.
You answer in plain English; Charlie writes the official narrative for your System Security Plan.
What makes it pass
- Every device in scope appears in the antivirus inventory or dashboard
- Real-time protection is visible as ON for each
- Email-protection setting is captured (Defender / Workspace Safe Browsing / equivalent)
- Signed inventory if using the manual path
Assessment objectives, NIST SP 800-171A
This is one of 15
Answer in plain English, drop the proof, confirm it MET.
Cedar Ridge Machine Works, LLC walked all 15 the same way. The platform explains each one in plain English, tells you exactly what to grab, checks it, and writes the paperwork, and you confirm each one MET. The self assessment stays your act. Start free, or book a call.