Having trouble understanding the "shared responsibility matrix" an assessor must evaluate for external service providers in the new #CMMC scoping guid
Having trouble understanding the "shared responsibility matrix" an assessor must evaluate for external service providers in the new #CMMC scoping guidance.
Confused? Make sense.
The SRM does not get mentioned as a potential assessment object in 171.
T…https://lnkd.in/ej57MJzt
By Greg McVerry · Permalink · Original tweet



