View source for Objectives to Assess for SPAs

The [https://dodcio.defense.gov/Portals/0/Documents/CMMC/ScopingGuideL2v2.pdf CMMC Level 2 Scoping Guide] includes a table describing the CMMC Assessment Requirements for each category of asset. For Security Protection Assets the Assessment Requirements are:<blockquote>Assess against Level 2 security requirements that are relevant to the capabilities provided.</blockquote>But what are the relevant security requirements for different types of SPAs? This page will try to answer that question.

== SPA Types ==

* Password Manager
* SIEM Tool
* MFA Provider
* EDR/XDR Tool