Question 1
(Topic 1)
While conducting a CMMC Level 2 Assessment for a small waveguide manufacturer, the client provides a copy of their CMMC Level 1 Self-Assessment that their senior official has recently approved and uploaded to the Supplier Performance Risk System (SPRS). What type of information may be covered within the Level 1 Self-Assessment that is OUTSIDE the scope of a Level 2 Assessment?
Select an option, then click Submit answer.
- ○ Sensitive Compartmented Information (SCI) shredded by an approved vendor
- ○ FCI data within the scope described in the contractor self-assessment
- ○ CUI in paper format
- ○ FCI within the CUI production enclave
