Which document stipulates these reporting requirements?

Prior to initiating an OSC’s CMMC Assessment, the Lead Assessor briefed the team on the most important requirements of the assessment. The assessor also insisted that the same results of the findings summary, practice ratings, and Level recommendations must be submitted to the C3PAO for initial processes and review. After several weeks of assessment, the C3PAO completes the internal review, the recommended results are then submitted through the C3PAO for final quality review and rating approval.

Which document stipulates these reporting requirements?
A . CMMC Assessment reporting requirements
B . DFARS 52.204-21 assessment reporting requirements
C . NISTSP 800-171 Revision 2 assessment reporting requirements
D . DFARS clause 252.204-7012 assessment reporting requirements

View Answer

Answer: B