What this requirement asks
FAR 52.204-21(b)(1)(x) text:
Monitor, control, and protect organizational communications (i.e., information transmitted or received by organizational information systems) at the external boundaries and key internal boundaries of the information systems.
This is CMMC Level 1 requirement SC.L1-b.1.x — FAR 52.204-21(b)(1)(x) — in the System & Communications Protection family. Level 1 is assessed on Federal Contract Information (FCI) by annual self-assessment; no POA&M is allowed — every requirement must be fully met at attestation.
Mapped NIST SP 800-171 requirement
- 3.13.1 — assessed in full at Level 2
Assessment objectives (1)
- SC.L1-b.1.x[a] — Monitor, control, and protect organizational communications (i.e., information transmitted or received by organizational information systems) at the external boundaries and key internal boundaries of the information systems.
Evidence that defends it
Show rules + logs + scan confirmation
Check your readiness
Level 1 self-assessment
FCI · 15 FAR requirements · annual self-assessment · no POA&M
Self-reported readiness only — not an SPRS score, verified result, or certification. A tick means you report satisfying the entire FAR item.
Path: close all remaining gaps
15 requirements remain unticked. All 15 must be met; Level 1 has no Conditional or POA&M path. Ticking all items does not establish an official status.
Remaining requirements (15)
- AC.L1-b.1.i — Authorized Access Control
- AC.L1-b.1.ii — Access Enforcement
- AC.L1-b.1.iii — External Connections
- AC.L1-b.1.iv — Control Publicly Posted Information
- IA.L1-b.1.v — Identification
- IA.L1-b.1.vi — Authentication
- MP.L1-b.1.vii — Media Sanitization
- PE.L1-b.1.viii — Limit Physical Access
- PE.L1-b.1.ix — Visitor Escort, Physical Access Logs & Access Devices
- SC.L1-b.1.x — Boundary Protection
- SC.L1-b.1.xi — Subnetwork Separation
- SI.L1-b.1.xii — Flaw Remediation
- SI.L1-b.1.xiii — Malicious Code Protection
- SI.L1-b.1.xiv — Malicious Code Updates
- SI.L1-b.1.xv — System & File Scanning
Only your Level 1 requirement ticks are saved in this browser; nothing is sent to Athena. Privacy policy