Which term describes "the protective measures that are commensurate with the consequences and probability
of loss, misuse, or unauthorized access to. or modification of information"?
A CMMC Assessment is being conducted at an OSC's HQ. which is a shared workspace in a multi-tenant
building. The OSC is renting four offices on the first floor that can be locked individually. The first-floor
conference room is shared with other tenants but has been reserved to conduct the assessment. The conference
room has a desk with a drawer that does not lock. At the end of the day, an evidence file that had been sent by
email is reviewed. What is the BEST way to handle this file?
A contractor provides services and data to the DoD. The transactions that occur to handle FCI take place over
the contractor's business network, but the work is performed on contractor-owned systems, which must be
configured based on government requirements and are used to support a contract. What type of Specialized
Asset are these systems?