As a CCA performing a CMMC compliance assessment, you need to verify that an organization's training practices align with cybersecurity policies in practice AC.L2-3.1.2.4. Which type of document would be the most appropriate to examine for this purpose?

Question

TheoryPractice · Accepted Answer

Staff compliance acknowledgments. The correct answer is Staff compliance acknowledgments. To assess whether training practices are aligned with cybersecurity policies under practice AC.L2-3.1.2.4, the Certified CMMC Assessor would examine staff compliance acknowledgments. These records indicate that employees have read and understood the policies, supporting the alignment between training content and policy requirements. Other options, such as training completion records and policy dissemination records, do not confirm direct acknowledgment and understanding of specific policies.

As a CCA performing a CMMC compliance assessment, you need to verify that an organization's training practices align with cybersecurity policies in practice AC.L2-3.1.2.4. Which type of document would be the most appropriate to examine for this purpose?

Related questions

Free practice here. Timed mocks when you are ready.