Câu 2: CCA: CMMC Certified Assessor

ESPs are exceptionally common today, given that many organizations are turning to secure cloud offerings to establish and maintain compliance. Integral to these relationships is a responsibility matrix, which defines who is responsible for specific items such as security. This can be a very complex assortment of taskings associated with cybersecurity and federal compliance, but what is the MOST important thing to remember?

1. A. The relationship of an OSC with an ESP is a partnership and the CMMC Assessment will evaluate the ESP at the same time as the OSC.
2. B. Only the OSC is being assessed for compliance, and while the ESP may have a number of responsibilities in the matrix, the OSC is ultimately responsible for meeting the requirements as specified by government mandates. — đáp án hiện tại
3. C. The CMMC Assessment Team will factor in any documentation provided by the ESP when evaluating the OSC for compliance.
4. D. The ESP is technically not part of the DIB and has no responsibility to be CMMC compliant in its own right.