In this edition of the On Call Compliance Solutions Compliance Tip of the Week, we discuss the newly released draft CMMC Assessment Process, or CAP for short.
One of the more important aspects of the CAP is that you will get a chance to remediate some of the deficiencies that an assessor might find during the process.
What is a little surprising is that the CAP is saying that nearly half, 52 of the 110 controls needed to be assessed for certification, and I quote, “have a limited or indirect effect on the security of the network and its data.” OKAY????
