Collect CMMC evidence from Commvault

Act as an experienced CMMC Level 2 assessor who knows Commvault. We use Commvault to back up systems that store CUI, and we need to collect evidence for NIST SP 800-171 Rev. 2.

- Deployment: [Cloud for Government / Commvault Cloud SaaS / Software we run]
- Requirements to cover: [List them, e.g. 3.8.9, 3.1.1, 3.1.5, 3.3.1, 3.5.3, 3.13.11]
- Assessment date: [Date]

For each requirement:
1. Say in one sentence what the assessor needs to see.
2. Name the Commvault screen, setting or report that shows it, and what the screenshot or export must include, such as dates, the setting value and who it applies to.
3. Say what Commvault doesn't cover for that requirement, so we know what evidence has to come from elsewhere, like our identity provider or our policies.

Then give me a checklist ordered by requirement, with a column for who collects each item. If you aren't sure a Commvault feature exists in our deployment, or whether something is FIPS-validated, say so and tell me what to ask Commvault or our MSP instead of guessing.

Some details above are still in square brackets. Ask me for them before you answer, rather than guessing.