David, a Certified CMMC Assessor (CCA), is conducting a CMMC assessment for a defense contractor. During the assessment, he observes the organization’s CEO making several statements to the Assessment Team about the company’s security practices that turn out to be false. How should David respond to the CEO’s behavior according to the CMMC CoPC?
Submit