Skip to content
◆ Pass My CMMC
Practices Start Here About

Access Control

AC.L2-3.1.1
AC.L2-3.1.1: Authorized Access Control
Limit system access to authorized users, processes acting on behalf of authorized users, and devices, and explain how you prove it.
hard

Pass My CMMC

Plain-English assessment prep from someone who has been in the room.

Site

All Practices Start Here About Cole

Resources

Access Control (AC) Incident Response (IR) Audit (AU)

© 2026 Cole Sunderman. This site provides general guidance based on one practitioner's assessment experience. It is not legal, compliance, or professional advice. Your organization's situation is unique. Work with qualified professionals for formal assessment preparation.