EVIDENCE COLLECTION GUIDE • COLLECTING EVIDENCE
Requirements 10 and 11: protecting your network boundary and separating public systems
KB-036 | Applies to: All plans | Last reviewed: October 1, 2026 | Maintained by AffirmReady Support
System and Communications Protection is about the edge of your network. You want to show that a firewall controls what comes in and goes out, and that anything the public can reach is kept separate from your internal business network.
Who usually collects this
Your IT provider.
Requirement 10: Protect your network boundary
What you are showing: a firewall monitors and controls traffic at your office and on your computers.
- A screenshot of the office firewall's status or dashboard showing it is active, with the model and firmware version.
- A summary of the firewall rules, or a note from your IT provider confirming inbound traffic is blocked by default except what the business needs.
- A screenshot showing the built-in firewall is turned on for company computers, such as the Firewall and network protection page in Windows Security, or a policy report covering all devices.
Requirement 11: Separate anything public from your internal network
What you are showing: guest Wi-Fi and any systems the public can reach are kept apart from company computers.
- A screenshot of your Wi-Fi settings showing guest Wi-Fi is a separate network that cannot reach company devices.
- A simple network diagram or description showing how the internal network, guest network, and any public-facing systems are separated. A hand drawing scanned to PDF is fine for a small office.
- If your website is hosted by an outside provider rather than on a server in your office, a short note saying so. That is a common and simple way to keep public systems separate.
Checklist
| # | Evidence | Typically from | Collected |
|---|---|---|---|
| 10 | Office firewall status and version | IT provider | ☐ |
| 10 | Firewall rule summary | IT provider | ☐ |
| 10 | Computer firewall turned on | IT provider | ☐ |
| 11 | Guest Wi-Fi separation | IT provider | ☐ |
| 11 | Network diagram or description | IT provider | ☐ |
| 11 | Website hosting note | Owner or IT provider | ☐ |
Where to save it
Save everything from this guide in your own evidence folder under CMMC L1 Evidence / 5 System and Communications Protection, then record the location in AffirmReady for each requirement. AffirmReady does not store evidence files, so your evidence stays in systems your company controls.
Need help?
If you have questions about firewall or network evidence, Email support@affirmready.com and include your company name and the email address on your AffirmReady account. Our team is available Monday through Friday, 8:00 AM to 5:00 PM Eastern, and typically responds within one business day.