Câu 42: CCA: CMMC Certified Assessor

During the Planning Phase of the Assessment Plan, the assessor determines that the client will likely include sensitive and proprietary CUI. What should the assessor consider as part of their virtual data collection techniques for this information?

1. A. The client and assessor should record the risks and mitigations to protect the CUI categories handled. — đáp án hiện tại
2. B. The client is responsible for safeguarding the data during collection, not the assessor.
3. C. The assessor should record the risks and mitigations to protect the CUI categories handled.
4. D. The assessor is responsible for safeguarding the data during collection, not the client.