Cyber AB CMMC CMMC-CCA Question # 87 Topic 9 Discussion
CMMC-CCA Exam Topic 9 Question 87 Discussion:
Question #: 87
Topic #: 9
A DoD contractor developing guidance and targeting systems has subcontracted a data analytics company to analyze their data accuracy. How should the DoD contractor handle the analytics company when preparing a CMMC assessment scope?
A.
Include only assets of the analytics company that deal with their equipment data analytics.
B.
Include the entire analytics company in the assessment scope.
C.
Terminate their engagement with the analytics company during the assessment process.
D.
Do not include the analytics company in the CMMC assessment scope.
The analytics company, as an ESP, must be included in the scope for assets processing, storing, or transmitting CUI (e.g., guidance system data), per the CMMC Assessment Scope - Level 2. Only relevant assets are scoped, not the entire company (Option B). Termination (Option C) is unnecessary, and exclusion (Option D) violates the guidance. A is correct.
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit