A small manufacturing company plans to undergo a CMMC assessment and needs to validate its scope. The company uses a cloud-based customer relationship management (CRM) system hosted by an external provider to store and process customer information, including FCI and CUI. Which of the following components should the company include in the scope of their CMMC assessment?
Submit