During an assessment, which phase of the process identifies conflicts of interest?
An Assessment Team is conducting interviews with team members about their roles and responsibilities. The team member responsible for maintaining the antivirus program knows that it was deployed but has very little knowledge on how it works. Is this adequate for the practice?
Who is responsible for identifying and verifying Assessment Team Member qualifications?
When planning an assessment, the Lead Assessor should work with the OSC to select personnel to be interviewed who could:
The Level 1 practice description in CMMC is Foundational. What is the Level 2 practice description?
A CCP is part of a CMMC Assessment Team interviewing a subject-matter expert on Access Control (AC) within an OSC. During the interview process, what will the CCP ensure about the information exchanged during the interview?
In scoping a CMMC Level 1 Self-Assessment, all of the computers and digital assets that handle FCI are identified. A file cabinet that contains paper FCI is also identified. What can this file cabinet BEST be determined to be?