System and Communications Protection · SC.L1-b.1.x(c)
Communications are monitored at the external system boundary
An assessment objective under requirement SC.L1-b.1.x, Boundary Protection, in the System and Communications Protection domain.
Objective Statement
Communications are monitored at the external system boundary
Objective identity
- Framework
- Cybersecurity Maturity Model Certification · Level 1
- Domain
- System and Communications Protection (SC)
- Objective ID
- SC.L1-b.1.x(c)
- Parent Requirement
- SC.L1-b.1.x · Monitor and control communications at the boundary
Assessment Procedures
The official government assessment method for this objective, exactly as printed in the DoD CMMC Assessment Guide, Level 1, which reprints it from NIST SP 800-171A (June 2018). An assessor examines artifacts, interviews people, and tests mechanisms to determine the result.
Examine
- System and communications protection policy
- Procedures addressing boundary protection
- System security plan
- List of key internal boundaries of the system
- System design documentation
- Boundary protection hardware and software
- Enterprise security architecture documentation
- System audit logs and records
- System configuration settings and associated documentation
- Other relevant documents or records
Interview
- System or network administrators
- Personnel with information security responsibilities
- System developers
- Personnel with boundary protection responsibilities
Test
- Mechanisms implementing boundary protection capability
Related Objectives
- SC.L1-b.1.x(a)the external system boundary is defined
- SC.L1-b.1.x(b)key internal system boundaries are defined
- SC.L1-b.1.x(d)communications are monitored at key internal boundaries
- SC.L1-b.1.x(e)communications are controlled at the external system boundary
- SC.L1-b.1.x(f)communications are controlled at key internal boundaries
- SC.L1-b.1.x(g)communications are protected at the external system boundary
- SC.L1-b.1.x(h)communications are protected at key internal boundaries
Source Authority
- Primary Authority
- NIST SP 800-171A (June 2018)
- Official Text
- Requirement Authority
- FAR 52.204-21(b)(1)
- Program Authority
- 32 CFR 170.15(c)(1)(ii) Table 2
- Framework Version
- CMMC Assessment Guide, Level 1 v2.13 (September 2024)
- Effective Date
- 2024-12-16
- Last Verified
- 2026-10-02
Cite This Page
“CMMC SC.L1-b.1.x(c): Communications are monitored at the external system boundary.” AssessrLog, a product of ProfytAI Pte. Ltd.. Last verified 2026-10-02. https://assessrlog.com/cmmc/objectives/communications-are-monitored-at-the-external-system-boundary/
Build the Record Behind This
AssessrLog logs the determination for this objective with its evidence and source record, so your Level 1 self-assessment stays traceable and ready to affirm. The MET, NOT MET, or N/A call is always yours to make.