Standards and checks

Trimtab checks technical settings and charts each result to the requirements it helps prove.

Standard	Who it applies to	Reference
CMMC Level 2 (NIST SP 800-171 r2)	Defense contractors handling CUI	CMMC Level 2
HIPAA Security Rule	Organizations handling ePHI	HIPAA Security Rule

Each client is scored against the standards you choose for it. See Create a client.

Checks

	Count	Reference
Windows device checks (Lookout)	37	Device checks
Microsoft 365 and Exchange Online checks	19	Microsoft 365 checks

See how scores are calculated in Scoring.

Coverage

Technical checks can prove technical requirements. Requirements about policy, training, personnel, and physical security need their own evidence. Each standard page lists exactly which requirements Trimtab checks.