Câu 17: CCP: Certified CMMC Professional

A Lead Assessor has been assigned to a CMMC Assessment. During the assessment, one of the assessors approaches with a signed policy. There is one signatory, and that person has since left the company. Subsequently, another person was hired into that position but has not signed the document. Is this document valid?

1. A. The signatory is the authority to implement and enforce the policy, and since that person is no longer with the company, the policy is not valid.
2. B. More research on the company policy of creating, implementing, and enforcing policies is needed. If the company has a policy identifying the authority as with the position or person, then the policy is valid.
3. C. The signatory does not validate or invalidate the policy. For the purpose of this assessment, ensuring that the policy is current and is being implemented by the individuals who are performing the work is sufficient.
4. D. The authority to implement and enforce lies with the position, not the person. As long as that position’s authority and responsibilities have not been removed from implementing that domain, it is still a valid policy. — đáp án hiện tại