You are a CCA conducting a CMMC assessment for an OSC. While evaluating Risk Assessment (RA) practices, you check how the OSC has addressed assessment objective [a] of RA.L2-3.11.1, “Determine if the frequency for assessing risk to organizational operations, organizational assets, and individuals is defined.” Which Assessment Object would most likely provide the answer to this requirement?
Submit