In scoping a CMMC Level 1 Self-Assessment, all of the computers and digital assets that handle FCI are
identified. A file cabinet that contains paper FCI is also identified. What can this file cabinet BEST be
determined to be?
A C3PAO is conducting High Level Scoping for an OSC that requested an assessment Which term describes
the people, processes, and technology that will be applied to the contract who are requesting a CMMC Level
assessment?
Within how many days from the Assessment Final Recommended Findings Brief should the Lead Assessor
and Assessment Team Members, if necessary, review the accuracy and validity of (he OSC's updated
POA&M with any accompanying evidence or scheduled collections?
Which term describes "the protective measures that are commensurate with the consequences and probability
of loss, misuse, or unauthorized access to. or modification of information"?