“Is this system in scope?”
That simple question turns into one of the biggest challenges organizations face during CMMC preparation.
The tricky part is that “internal” and “external” don’t always mean what people think they do. A system can be internal to your organization but still be external to your CMMC boundary … clear as mud, right?
In this video, Kelly Hood walks through:
- What a CMMC boundary actually is
- How external systems and external connections fit in
- What assessors are looking for around AC.L2-3.1.13 & AC.L2-3.1.20
If boundaries and scoping have been confusing, hopefully this helps simplify things.
Author
Share
Connect with our team to gain the insight and guidance needed to move forward with confidence.