Example, read only. A sample account that shows what finished CMMC looks like.
Safeguard 15 of 15 · SI.L1-b.1.xv
SI.L1-3.14.5 · FAR 52.204-21 (b)(1)(xv) · NIST SP 800-171 3.14.5
System & File Scanning
Perform periodic scans of the information system and real-time scans of files from external sources as files are downloaded, opened, or executed
What it means
Run full scans regularly, and have antivirus inspect files the moment they're downloaded or opened.
Why it matters
Real-time protection on plus a scheduled full scan at least weekly is the industry-standard baseline. Screenshot both settings and a recent successful scan.
How to do it, Microsoft 365 / Defender
- 1Go to Defender antivirus policy and screenshot the real-time protection and scheduled-scan settings
- 2For a representative device, screenshot Windows Security → Virus & threat protection → Scan options / scan history showing a recent full scan completed
Capture: Policy screenshot + recent scan-history screenshot.
The narrative on file
Real time and scheduled scans run on every managed workstation, and downloads and email attachments are scanned as they arrive. Scan results feed the Defender dashboard the owner reviews weekly.
You answer in plain English; Charlie writes the official narrative for your System Security Plan.
What makes it pass
- Real-time protection visible as ON in product or policy UI
- Scheduled-scan setting shows a recurring frequency (weekly or more often)
- At least one recent successful full scan is visible in scan history
- Schedule lands when the device is awake (not 2am for a closed laptop)
Assessment objectives, NIST SP 800-171A
This is one of 15
Answer in plain English, drop the proof, confirm it MET.
Cedar Ridge Machine Works, LLC walked all 15 the same way. The platform explains each one in plain English, tells you exactly what to grab, checks it, and writes the paperwork, and you confirm each one MET. The self assessment stays your act. Start free, or book a call.