Cyber AB CMMC CMMC-CCA Question # 7 Topic 1 Discussion

Comprehensive and Detailed in Depth Explanation:

The CMMC Assessment Process (CAP) and NIST SP 800-171A define assessment procedures asconsisting of Assessment Methods (examine, interview, test), Assessment Objects (e.g., policies, personnel), and Assessment Objectives (specific determinations). Depth and coverage (Option C) are attributes that guide the rigor of the assessment approach but are not components of the procedure itself. They influence how methods are applied, not the procedure’s structure. Options A, B, and D are explicit parts of the procedure per NIST SP 800-171A, making Option C the correct answer as it is not a direct component.

Reference Extract:

NIST SP 800-171A, Introduction:“Assessment procedures include objectives, methods, and objects; depth and coverage are attributes applied to these.”

CMMC Assessment Process (CAP) v1.0, Section 4.1:“Procedures consist of methods, objects, and objectives.”Resources:https://csrc.nist.gov/pubs/sp/800/171/a/final ;https://cyberab.org/Portals/0/Documents/Process-Documents/CMMC-Assessment-Process-CAP-v1.0.pdf