ยท CMMC
Configuration Management Baselines for CMMC: Aligning to CIS and DoD STIGs
CMMC Level 2 expects a documented baseline, an accurate inventory, enforced secure settings, and controlled change, and you can use CIS Benchmarks and DoD STIGs as hardening references if you tailor, approve, and maintain them inside your CUI scope.