New Realtrac Feature Helps Manufacturers Move Toward CMMC Compliance
At Realtrac, we’re always listening to our customers and finding new ways to help them stay compliant and competitive. One topic we’ve heard about again and again is CMMC (Cybersecurity Maturity Model Certification) — a key requirement for manufacturers working with the Federal Government and Department of Defense.
That’s why we’re proud to introduce a new feature in the latest release of the Realtrac Client software, designed to support your efforts toward CMMC compliance and help protect Controlled Unclassified Information (CUI).
What Is CMMC and Why It Matters
CMMC establishes a set of cybersecurity standards that manufacturers must meet to handle Federal or DoD-related projects. One major part of this process involves identifying which computers contain Controlled Unclassified Information (CUI), such as blueprints, CAD files, and technical drawings tied to sensitive contracts.
How Realtrac Helps
The new “Sensitive Job” setting gives you more control over how sensitive data is accessed.
When a job is marked as Sensitive:
- All file attachments (including blueprints and CAD files) attached to that job or part are blocked from Shop Floor and Piece Count Panel clients.
- The thumbnail preview typically shown on the Shop Floor interface will also be hidden for Sensitive Jobs.
By limiting access in this way, your CMMC management team can determine that Realtrac software will not contain or access CUI, potentially reducing the compliance burden on those devices.
Improved Security Control Tools
To further support compliance, users with Administrator Roles can now manage connections directly within the Realtrac Client software without accessing the server. This makes it easier to disconnect or monitor user sessions while maintaining a secure, locked-down Realtrac Server PC.
CMMC COMPLIANCE
Helping Manufacturers Take the Next Step Toward CMMC Level 2 Compliance
Manufacturers working with the Department of Defense face increasingly demanding cybersecurity requirements. Realtrac is designed to help manufacturers strengthen security around their ERP environment and support their efforts toward CMMC Level 2 compliance.
Realtrac’s High Security configuration provides additional security controls designed to help protect sensitive information, control user access, monitor system activity, and secure communications.
What Is CMMC and Why Does It Matter?
Protecting Controlled Unclassified Information Starts With Your Technology
The Cybersecurity Maturity Model Certification (CMMC) framework establishes cybersecurity requirements for organizations working with the U.S. Department of Defense and other federal contracts.
For manufacturers, meeting these requirements can involve much more than simply securing an ERP system. Physical security, policies, procedures, employee practices, network infrastructure and other controls may all play a role.
Realtrac’s role is to provide security features that can help address the portions of your CMMC requirements that involve your ERP system and its data.
REALTRAC HIGH SECURITY
A More Secure Realtrac Environment
Realtrac has implemented a High Security feature that configures the system with enhanced security controls intended to help manufacturers meet CMMC Level 2 requirements.
When High Security is enabled, Realtrac provides additional controls around:
- ✓ User access and permissions
- ✓ Least-privilege access
- ✓ Separation of duties
- ✓ User accountability
- ✓ Audit logging
- ✓ System configuration
- ✓ Network communication
- ✓ Data encryption
- ✓ Session security
- ✓ Security notifications
- ✓ Remote connection management
Security controls built into the ERP—not bolted on afterward.
CMMC LEVEL 2 CONTROLS SUPPORTED BY REALTRAC
Access Control: Control Who Can Access Your Realtrac Environment
Realtrac allows administrators to create individual user accounts and determine what information and functionality each user can access.
Features include:
- ✓ Individual user accounts
- ✓ User-specific permissions
- ✓ Module-level access controls
- ✓ Feature-level permissions
- ✓ Least-privilege user setup
- ✓ Privileged access controls
- ✓ Automatic session logout
Supported CMMC Controls:
Audit & Accountability: Know Who Changed What—and When
Realtrac maintains audit information for major data groups throughout the system.
Creation, editing and deletion of data can be independently logged, with audit records including the user’s unique ID along with date and time information.
Audit records can also be accessed directly from the database for organizations that want to develop their own automated audit processes.
Realtrac provides:
- ✓ User accountability
- ✓ Audit logging
- ✓ Date and time stamps
- ✓ User identification
- ✓ Database-level audit records
- ✓ Audit record protection
- ✓ Access-controlled audit information
Supported CMMC Controls:
Configuration Management: Limit Functionality to What Your Users and Systems Need
Security starts with limiting unnecessary access and functionality.
Realtrac users begin with the lowest possible permissions, with additional permissions assigned only as needed.
Realtrac server installations also use firewall configurations that open only the ports required for activated services. On client PCs, organizations can remove unnecessary executable files depending on the role of that workstation.
Reduce unnecessary functionality. Reduce unnecessary exposure.
Supported CMMC Controls:
Identity & Authentication: Protect User Credentials
Realtrac provides enhanced password security as part of its High Security configuration.
Passwords are encrypted both during transmission over the network and while stored at rest.
Security features include:
- ✓ Stronger password requirements
- ✓ Encrypted passwords
- ✓ Protected credential transmission
- ✓ Controlled user authentication
Supported CMMC Controls:
Incident Response & Security Notifications: Stay Informed When Security Issues Emerge
Realtrac provides support resources and maintains information about recently identified vulnerabilities, updates and software releases.
Customers can subscribe to the Realtrac Knowledge Base for automated security notifications.
Realtrac has also established security@realtrac.com specifically for reporting potential security flaws and vulnerabilities. Reports are monitored during normal business hours, with a response targeted within two business days.
Supported CMMC Controls:
Media & Remote Access Protection: Control Connections to Your Realtrac Environment
Realtrac provides administrators with the ability to remotely disconnect and close Realtrac software clients without physically accessing the Realtrac server hardware.
This capability can provide an additional layer of control when managing access to the Realtrac environment.
Supported CMMC Control:
Alternative Work Sites & Business Continuity: Keep Your Shop Connected When Circumstances Change
Realtrac can support the deployment of a secondary “hot spare” Realtrac server at an alternative work site with an additional support contract.
Realtrac software has also been tested and is compatible with major VPN offerings.
Supported CMMC Control:
Network & Data Security
Realtrac provides several controls designed to protect communication between users, the Realtrac server and the database environment. Protect data as it moves through your network:
Network Communication by Exception
Default firewall rules for a Realtrac server installation open only the ports required for the software’s functions.
Encrypted Data in Transit
Data transmitted between the Realtrac server and client is encrypted using TLS 1.3.
Separate User Sessions
Each Realtrac user maintains a separate session and database connection, preventing users from seeing changes other users are making in real time.
Automatic Connection Termination
Users connected as full clients are automatically disconnected as part of the system’s midnight routine.
Supported CMMC Controls:
A Key Part of Your CMMC Strategy
Realtrac Supports Your CMMC Journey—It Doesn’t Replace It
CMMC compliance involves more than ERP software. Organizations must evaluate their entire environment, including areas such as:
- ✓ Physical security
- ✓ Network infrastructure
- ✓ Policies and procedures
- ✓ Employee practices
- ✓ Access management
- ✓ Incident response
- ✓ System configuration
- ✓ Data protection
Realtrac’s security features are designed to help address the CMMC requirements that relate to the Realtrac application, its users and its data.
Your organization is responsible for determining its overall CMMC compliance requirements and implementing the necessary controls across your environment.
CMMC Level 2 Control Summary
Ready to Strengthen Your CMMC Readiness?
Realtrac can help you take a more secure approach to managing your manufacturing data, users and ERP environment.
See How Realtrac Can Support Your CMMC Strategy