Another Significant Microsoft Update for CMMC ... Vulnerability Management
Microsoft now has an answer for Vulnerability Management using Microsoft Defender for Endpoint. For cloud-only companies, you can now track and manage vulnerabilities on user workstations using a FedRAMP approved cloud platform - Microsoft 365/Azure. This update will help DIB companies with these CMMC practices: RM.2.142, RM.2.143, CA.2.159, RM.4.150. For more information, see Microsoft Defender for Endpoint