Huntress and DEFCERT Release Resources to Help Organizations Prepare for CMMC Assessments

Summary

Huntress and DEFCERT created CMMC preparation resources, including responsibility matrices and documentation templates. Huntress Sensitive Data Mode limits which file extensions SOC analysts can retrieve from hosts, helping address CUI handling in assessments.

Key points

The resource package includes a Shared Responsibility Matrix, Operations Plan, interconnection agreement, baseline configuration templates, approval documentation, and recurring-activity checklists.
The Shared Responsibility Matrix separates Huntress capabilities from partner and client actions to clarify shared CMMC responsibilities.
Sensitive Data Mode limits which file extensions Huntress SOC analysts can retrieve from hosts using the Huntress agent.
Organizations identify CUI file extensions, confirm they are on Huntress’s Blocked Extensions list, and ask Huntress support to enable Sensitive Data Mode; the article says customers cannot change the setting once enabled.
The article says the documentation has been used in assessment-scoping discussions to explain how Huntress can operate as a Security Protection Asset without becoming a CUI Asset.
The templates are intended to document key decisions and support evidence collection for NIST SP 800-171A assessment objectives.

Article Details

Event Type: Huntress and DEFCERT collaborated to develop CMMC assessment-preparation resources for partners and Organizations Seeking Assessment.
Impact: The resources include documentation, templates, and job aids for shared responsibility, operations planning, system interconnections, security configurations, approvals, and recurring compliance activities. Huntress Sensitive Data Mode limits file extensions that SOC analysts can retrieve from hosts through the Huntress agent, helping organizations document controls and demonstrate how Huntress may operate as a Security Protection Asset within a CMMC assessment scope.