CCA Blueprint - Revision history

David at 01:32, 2 March 2026

2026-03-02T01:32:32Z

← Older revision		Revision as of 01:32, 2 March 2026
Line 1:		Line 1:
	'''Source of Reference: The CCA blueprint document from [https://cyberab.org/CMMC-Ecosystem/Ecosystem-roles/Assessing-and-Certification Cybersecurity Maturity Model Certification Accreditation Body, Inc.]'''		'''Source of Reference: The CCA blueprint document from [https://cyberab.org/CMMC-Ecosystem/Ecosystem-roles/Assessing-and-Certification Cybersecurity Maturity Model Certification Accreditation Body, Inc.]'''

	For inquiries and reporting errors on this wiki, please [mailto:support@~~cmmctoolkit~~.org contact us]. Thank you.		For inquiries and reporting errors on this wiki, please [mailto:support@cmmcwiki.org contact us]. Thank you.

	== Domains ==		== Domains ==

Wikiadmin: /* Task 1. Identify evidence verification/validation methods and objects for Practices based on the CMMC Level 2 Assessment Guide and CMMC Assessment Process (CAP) documentation. */

2023-05-08T23:14:16Z

Task 1. Identify evidence verification/validation methods and objects for Practices based on the CMMC Level 2 Assessment Guide and CMMC Assessment Process (CAP) documentation.

← Older revision		Revision as of 23:14, 8 May 2023
Line 401:		Line 401:
	(at a minimum the practices listed below must be evaluated for CCA candidates)		(at a minimum the practices listed below must be evaluated for CCA candidates)
	\|-		\|-
			\|5A, 5B
			\|4.1.3.A
	\|A. Access Control (AC)		\|A. Access Control (AC)
	\|-		\|-

Wikiadmin: /* Task 1. Identify evidence verification/validation methods and objects for Practices based on the CMMC Level 2 Assessment Guide and CMMC Assessment Process (CAP) documentation. */

2023-05-08T23:13:40Z

Task 1. Identify evidence verification/validation methods and objects for Practices based on the CMMC Level 2 Assessment Guide and CMMC Assessment Process (CAP) documentation.

Show changes

Wikiadmin: /* Task 1. Identify evidence verification/validation methods and objects for Practices based on the CMMC Level 2 Assessment Guide and CMMC Assessment Process (CAP) documentation. */

2023-05-08T22:54:14Z

Task 1. Identify evidence verification/validation methods and objects for Practices based on the CMMC Level 2 Assessment Guide and CMMC Assessment Process (CAP) documentation.

Show changes

Wikiadmin: /* Domain 4: CMMC Levels 2 Practices */

2023-05-08T22:36:52Z

Domain 4: CMMC Levels 2 Practices

@@ Line 342: / Line 342: @@
 :C. Test
 |-
-|2. Adequacy and sufficiency related to evidence around all below practices
+|3D
-:A. Characteristics of acceptable evidence
+|4.1.2
 :B. Evidence of enabling persistent and habitual application of practices
 ::(1) Policy
 ::(2) Plan
 ::(3) Resourcing
 ::(4) Communication
 ::(5) Training
 :C. Characterization of evidence
 ::(1) Validate that evidence effectively meets intent of standard
 ::(2) An objective and systematic examination of evidence for the purpose of providing an independent assessment of the performance of CMMC
 |-
 |3. CMMC Level 2 Assessment Practice objectives including potential methods, objects, and assessment considerations (by domain):
 (at a minimum the practices listed below must be evaluated for CCA candidates)

Wikiadmin: /* Task 1. Identify evidence verification/validation methods and objects for Practices based on the CMMC Level 2 Assessment Guide and CMMC Assessment Process (CAP) documentation. */

2023-05-08T22:32:37Z

Task 1. Identify evidence verification/validation methods and objects for Practices based on the CMMC Level 2 Assessment Guide and CMMC Assessment Process (CAP) documentation.

@@ Line 317: / Line 317: @@
 == Domain 4: CMMC Levels 2 Practices ==
 === Task 1. Identify evidence verification/validation methods and objects for Practices based on the CMMC Level 2 Assessment Guide and CMMC Assessment Process (CAP) documentation. ===
-{|class="wikitable"
+{|class="wikitable" style="width: 85%;"
 |1. Methods and objects for determining evidence
 :A. Examine
 :B. Interview
 :C. Test
 |-

Wikiadmin: /* Task 1. Given a scenario, apply the appropriate phases and steps to plan, prepare, conduct, and report on a CMMC Level 2 Assessment. */

2023-05-08T22:26:37Z

Task 1. Given a scenario, apply the appropriate phases and steps to plan, prepare, conduct, and report on a CMMC Level 2 Assessment.

@@ Line 261: / Line 261: @@
 == Domain 3: CMMC Assessment Process (CAP) v5.X ==
 === Task 1. Given a scenario, apply the appropriate phases and steps to plan, prepare, conduct, and report on a CMMC Level 2 Assessment. ===
-{|class="wikitable"
+{|class="wikitable" style="width: 85%;"
 |-
-|2. Phase 2—Conduct assessment:
+! style="width: 10%"|Lesson Topic
-:a. Collect and examine evidence
+! style="width: 10%"|Objective
-:b. Score Practices and validate preliminary results
+! style="width: 80%"|Objective Description
 |-
-|3. Phase 3—Report recommended assessment results:
+|3A, 3B, 3C
-:a. Deliver recommended assessment results
+|3.1.1
 |}

Wikiadmin: /* Task 3. Evaluate CMMC assessment scope considerations based on the CMMC Level 2 Assessment Scoping Guide. */

2023-05-08T22:18:47Z

Task 3. Evaluate CMMC assessment scope considerations based on the CMMC Level 2 Assessment Scoping Guide.

← Older revision		Revision as of 22:18, 8 May 2023
Line 239:		Line 239:
	\|-		\|-
	\|-		\|-
	\|4E		\|4C, 4D
	\|2.3.3		\|2.3.3
	\|3. External Services Providers		\|3. External Services Providers
	\|-		\|-
	\|4E		\|4D
	\|2.3.3.A		\|2.3.3.A
	\|		\|
	:A. Evaluation of responsibility matrix		:A. Evaluation of responsibility matrix
	\|-		\|-
	\|4E		\|2C, 4E
	\|2.3.3.B		\|2.3.3.B
	\|		\|
	:B. Non-Duplication		:B. Non-Duplication
	\|-		\|-
	\|4E		\|4D
	\|2.3.3.C		\|2.3.3.C
	\|		\|

Wikiadmin: /* Task 3. Evaluate CMMC assessment scope considerations based on the CMMC Level 2 Assessment Scoping Guide. */

2023-05-08T22:17:57Z

Task 3. Evaluate CMMC assessment scope considerations based on the CMMC Level 2 Assessment Scoping Guide.

@@ Line 204: / Line 204: @@
 === Task 3. Evaluate CMMC assessment scope considerations based on the CMMC Level 2 Assessment Scoping Guide. ===
-{|class="wikitable"
+{|class="wikitable" style="width: 85%;"
 |1. FCI and CUI within the same Assessment Scope:
 |-
 |2. FCI and CUI NOT within the same Assessment Scope:
 :A. Contractor defines Self-Assessment of FCI assets (In-scope)
 :B. Contractor defines CUI assets (In-scope), CMMC Assessor certifies implementation of Level 1 & 2 practices
 |-
 |3. External Services Providers
 :A. Evaluation of responsibility matrix
 :B. Non-Duplication
 :C. Agreements, Service-Level Agreements (SLAs)
 |}

Wikiadmin: /* Task 2. Given a scenario, analyze the CMMC Assessment Scope based on the predetermined CUI categories within the CMMC Level 2 Assessment Scoping Guide. */

2023-05-08T22:12:54Z

Task 2. Given a scenario, analyze the CMMC Assessment Scope based on the predetermined CUI categories within the CMMC Level 2 Assessment Scoping Guide.

← Older revision		Revision as of 22:12, 8 May 2023
Line 185:		Line 185:
	\|2.2.3.B(1)		\|2.2.3.B(1)
	\|		\|
	::(1) ~~gates~~;		::(1) Gates;
	\|-		\|-
	\|4A		\|4A
	\|2.2.3.B(2)		\|2.2.3.B(2)
	\|		\|
	::(2) ~~locks~~;		::(2) Locks;
	\|-		\|-
	\|4A		\|4A
	\|2.2.3.B(3)		\|2.2.3.B(3)
	\|		\|
	::(3) ~~badge~~ access; and		::(3) Badge access; and
	\|-		\|-
	\|4A		\|4A
	\|2.2.3.B(4)		\|2.2.3.B(4)
	\|		\|
	::(4) ~~guards~~		::(4) Guards
	\|}		\|}