CAP Glossary - Revision history

Wikiadmin at 01:36, 6 August 2022

2022-08-06T01:36:59Z

← Older revision		Revision as of 01:36, 6 August 2022
Line 1:		Line 1:
	'''Source of Reference: The [https://cyberab.org/Portals/0/Documents/Process-Documents/CMMC-Assessment-Process-CAP-v1.0.pdf CMMC Assessment Process] from Cybersecurity Maturity Model Certification Accreditation Body, Inc.'''		'''Source of Reference: The [https://cyberab.org/Portals/0/Documents/Process-Documents/CMMC-Assessment-Process-CAP-v1.0.pdf CMMC Assessment Process document] from Cybersecurity Maturity Model Certification Accreditation Body, Inc.'''

	For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you.		For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you.

Wikiadmin: /* W */

2022-08-05T17:57:57Z

← Older revision		Revision as of 17:57, 5 August 2022
Line 313:		Line 313:
	\|Documents or materials, regardless of form, that an organization or user expects to revise prior to creating a finished product. Also referred to as “drafts”.		\|Documents or materials, regardless of form, that an organization or user expects to revise prior to creating a finished product. Also referred to as “drafts”.
	\|[https://www.govinfo.gov/content/pkg/CFR-2017-title32-vol6/pdf/CFR-2017-title32-vol6-part2002.pdf 32CFR §2002(tt)]		\|[https://www.govinfo.gov/content/pkg/CFR-2017-title32-vol6/pdf/CFR-2017-title32-vol6-part2002.pdf 32CFR §2002(tt)]
	\|
	\|}		\|}

Wikiadmin: /* H */

2022-08-05T17:57:38Z

Show changes

Wikiadmin: /* D */

2022-08-05T17:40:32Z

Show changes

Wikiadmin: /* C */

2022-08-05T17:27:28Z

← Older revision		Revision as of 17:27, 5 August 2022
Line 52:		Line 52:
	== C ==		== C ==
	{\|class="wikitable" style="width: 85%;"		{\|class="wikitable" style="width: 85%;"
	! style="width: 10%"\| Term		! style="width: 15%"\| Term
	! style="width: 80%"\| Description		! style="width: 65%"\| Description
	! style="width: 10%"\| Footnote		! style="width: 20%"\| Footnote
	\|-		\|-
	\|Certificate		\|Certificate

Wikiadmin: /* A */

2022-08-05T17:27:10Z

← Older revision		Revision as of 17:27, 5 August 2022
Line 5:		Line 5:
	== A ==		== A ==
	{\|class="wikitable" style="width: 85%;"		{\|class="wikitable" style="width: 85%;"
	! style="width: 10%"\| Term		! style="width: 15%"\| Term
	! style="width: 80%"\| Description		! style="width: 65%"\| Description
	! style="width: 10%"\| Footnote		! style="width: 20%"\| Footnote
	\|-		\|-
	\|Access		\|Access

Wikiadmin: /* D */

2022-08-05T17:25:36Z

← Older revision		Revision as of 17:25, 5 August 2022
Line 117:		Line 117:
	! style="width: 80%"\| Description		! style="width: 80%"\| Description
	! style="width: 10%"\| Footnote		! style="width: 10%"\| Footnote
			\|-
	\|Daily Checkpoint		\|Daily Checkpoint
	\|An immediate "after-action" discussion and evaluation of an OSC’s current compliance status against CMMC practices conducted with the OSC Assessment participants, following the completion of that day’s Assessment activities such as objective Evidence review, interviews, or observations/tests. Also known in industry as a “hot wash” or “hot wash review.” Daily Checkpoint results/discussion must be recorded in a log by the Lead Assessor.		\|An immediate "after-action" discussion and evaluation of an OSC’s current compliance status against CMMC practices conducted with the OSC Assessment participants, following the completion of that day’s Assessment activities such as objective Evidence review, interviews, or observations/tests. Also known in industry as a “hot wash” or “hot wash review.” Daily Checkpoint results/discussion must be recorded in a log by the Lead Assessor.

Wikiadmin: /* C */

2022-08-05T17:25:19Z

← Older revision		Revision as of 17:25, 5 August 2022
Line 55:		Line 55:
	! style="width: 80%"\| Description		! style="width: 80%"\| Description
	! style="width: 10%"\| Footnote		! style="width: 10%"\| Footnote
			\|-
	\|Certificate		\|Certificate
	\|A Record issued to an OSC upon successful completion of an Assessment which evidences the CMMC Level against which the OSC has been successfully assessed by an authorized C3PAO. See also Limited CMMC Certification.		\|A Record issued to an OSC upon successful completion of an Assessment which evidences the CMMC Level against which the OSC has been successfully assessed by an authorized C3PAO. See also Limited CMMC Certification.

Wikiadmin: /* A */

2022-08-05T17:24:54Z

Show changes

Wikiadmin: /* A */

2022-08-05T16:53:06Z

← Older revision		Revision as of 16:53, 5 August 2022
Line 28:		Line 28:
	\|-		\|-
	\|Artifacts		\|Artifacts
	Tangible and reviewable records that are the direct outcome of a practice or process being performed by a		\|Tangible and reviewable records that are the direct outcome of a practice or process being performed by a system, person, or persons performing a role in that practice, control, or process. Artifacts may be a printed hard-copy or a soft- or electronic copy of a document or file embedded in a system or software but must be a result or an output from the performance of a process within the Organization Seeking Certification.
	system, person, or persons performing a role in that practice, control, or process. Artifacts may be a printed		\|
	hard-copy or a soft- or electronic copy of a document or file embedded in a system or software but must be		\|-
	a result or an output from the performance of a process within the Organization Seeking Certification.		\|Assessment
			\|The testing or evaluation (e.g., interviews, document reviews, observations) of security practices to determine the extent to which the practices are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for an information system or organization. Source: NIST SP 800-37 Rev. 2 Also referred to as “CMMC Assessment”.

	~~Assessment~~		Assessment is the term used by CMMC for the activity performed by the C3PAO to evaluate the CMMC level of a DIB contractor. Source: CMMC
	~~The testing or evaluation (e.g., interviews, document reviews, observations) of security practices to~~		\|
	~~determine the extent to which the practices are implemented correctly, operating as intended, and~~		\|-
	~~producing the desired outcome with respect to meeting the security requirements for an information system~~		\|Assessment Appeals Process
	~~or organization. Source: NIST SP 800-37 Rev. 2 Also referred to as “CMMC Assessment”.~~		\|A formal process managed by the Cyber AB to seek resolution of a disagreement of an assessment result.
			\|
	Assessment is the term used by CMMC for the activity performed by the C3PAO to evaluate the CMMC		\|-
	level of a DIB contractor. Source: CMMC		\|Assessment Official

	Assessment Appeals Process
	A formal process managed by the Cyber AB to seek resolution of a disagreement of an assessment result.

	Assessment Official
	The most senior representative of an Organization Seeking Certification (OSC) who is directly and actively		The most senior representative of an Organization Seeking Certification (OSC) who is directly and actively
	responsible for leading and managing the OSC’s engagement in the Assessment.		responsible for leading and managing the OSC’s engagement in the Assessment.