A cybersecurity team is organizing documentation for an upcoming CMMC Level 2 assessment. Based on the table below, which document type is NOT relevant to the assessment? Documentation Type Status Incident response plans Relevant Marketing materials Irrelevant Data flow diagrams Relevant System specifications for non-connected devices Irrelevant

Question

TheoryPractice · Accepted Answer

Marketing materials. Marketing materials are not relevant to a CMMC Level 2 assessment. The assessment focuses on cybersecurity policies, procedures, and data flow diagrams to ensure adequate security measures are in place.

Related questions

Free practice here. Timed mocks when you are ready.