Skip to main content
Question

ControlMap CMMC/171 evidence expectations vs DIBCAC expectations

  • November 16, 2024
  • 0 replies
  • 46 views

Forum|alt.badge.img+1

DIBCAC released a Self-Assessment Database that they themselves use when conducting assessments. It has very explicit expectations of minimally 320 evidence checks--some of which can be met by a single document/artifact. DIBCAC has evidence expectations for each of the 320 assessment objectives. How has ControlMap’s default expectations for evidence for CMMC landed on 53 pieces (and the same count for 171r2 framework)?  

0 replies

Be the first to reply!