In this next installment of the Cybersecurity Maturity Model Certification (CMMC) series, Ben Curry and Shawn Hays will be discussing the logging, analytics, and incident response requirements found in Levels 3-5 of CMMC. Levels 3-5 introduce the need for collecting audit information into one or more central repositories for active monitoring and reporting purposes. A Security Information & Event Management (SIEM) product like Microsoft's Azure Sentinel is one of the ideal paths towards meeting this set of requirements. In addition to the requirements overview, Mr. Curry (CISSP and 11x Microsoft MVP) will provide strategies and insights for managing a SIEM, along with a demonstration of Sentinel’s capabilities.