Discuss Cyber AB CMMC-CCA Exam Topic 3 Question 7

You are a Certified CMMC Assessor (CCA) working with a small defense contractor who needs a CMMC Level 2 assessment. This is their first CMMC assessment. During your initial meeting with the OSC, they express a desire for a quick assessment to minimize disruption to their daily operations. They also mention their limited budget for the assessment. How will you proceed with assessment framing in this scenario?

ADetermine the Rough-Order-of-Magnitude (ROM), by having the C3PAO work with the OSC Assessment Official to determine an anticipated level-of-effort and associated cost estimate to conduct the CMMC Assessment.

BDefine the specific systems, data, and processes in scope for the assessment.

CNegotiate the cost of the assessment with the OSC.

DDiscuss the assessment timeline and resource requirements with the OSC.

Suggested Answer: A

Comprehensive and Detailed

The CMMC Assessment Process (CAP) requires establishing a Rough-Order-of-Magnitude (ROM) during Phase 1 to estimate effort and cost, balancing OSC preferences (speed, budget) with assessment requirements. This involves collaboration between the C3PAO and OSC Assessment Official. Option B is part of scoping but not the framing step. Option C is premature, and Option D is secondary to ROM. A is correct per the CAP.

CMMC Assessment Process (CAP) v1.0, Section 2.1 (Phase 1: Plan and Prepare), p. 7: 'The C3PAO determines the ROM with the OSC.'

Get Premium CMMC-CCA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

32 comments · newest first

Micaela 5 months ago

I agree with Becky. Negotiating costs can ease their budget concerns.

Thaddeus 5 months ago

I'm unsure. Maybe a mix of A and B? Cost and scope are both important.

Alyce 6 months ago

I lean towards option D. A clear timeline helps manage expectations.

Norah 6 months ago

Option C sounds good. We need to keep costs low for them.

Laila 6 months ago

Totally agree with D, timeline is key to keep things smooth!

Mammie 6 months ago

Surprised they want a quick assessment with a tight budget.

Layla 6 months ago

I think B is more important, need to know what’s in scope!

Kanisha 6 months ago

Definitely go for option A, gotta know the costs first.

Kasandra 7 months ago

A quick assessment sounds tricky, but it's doable!

Cyril 7 months ago

Option B is the way to go, but don't forget to throw in a little humor to keep them entertained during the assessment.

Whitley 7 months ago

Haha, I bet the OSC is hoping for a "quick and cheap" assessment. Good luck with that!

Marica 8 months ago

This is a tough one, but I'd go with a combination of A and B. Gotta balance cost and scope.

Nada 8 months ago

Option C is a must. Negotiating the cost is key given their limited budget.

Louis 8 months ago

I agree with option D. Discussing the assessment details with the OSC is important to set clear expectations.

Lera 8 months ago

Option A sounds like a good idea to manage their expectations on cost and timeline.

Alison 8 months ago

I think option B is the way to go. Defining the scope upfront is crucial for a smooth assessment.

Eric 8 months ago

I keep getting confused about whether to start with cost estimates or scope. I guess determining the ROM could be a good starting point, but I’m not completely confident.

Shasta 9 months ago

This scenario feels similar to a practice question we did about balancing budget and scope. I think discussing the timeline and resources is crucial, so option D seems relevant.

Markus 9 months ago

I'm not entirely sure, but I think negotiating costs could lead to issues later on. Maybe we should focus on the assessment requirements first?

Peggie 9 months ago

I remember we talked about the importance of defining the scope first, so I think option B might be the best choice here.

Sylvia 9 months ago

This is a good example of having to manage client expectations. I'll need to be transparent about the assessment requirements while also trying to accommodate their constraints.

Catarina 9 months ago

Option A seems like a good starting point to get a realistic estimate for them. Then we can dive into the specifics in options B, C, and D.

Alease 9 months ago

I think option B is key - we need to clearly define the scope upfront to ensure we can meet their needs efficiently. Then we can work on the cost and timeline.

Nakita 10 months ago

I think option A is the best. We need a clear cost estimate first.

Art 10 months ago

I prefer option B. Defining the scope is crucial for a focused assessment.

Lettie 11 months ago

Hmm, I'm not sure which option is best here. I'll need to carefully consider the pros and cons of each approach to determine the most appropriate way to frame the assessment.

Hyun 11 months ago

This seems like a tricky situation with the client's desire for a quick and low-cost assessment. I'll need to balance their needs with the assessment requirements.

Edison 4 months ago

↳ replying to Hyun

Yes, let's define the scope first to streamline the process.

Jovita 5 months ago

↳ replying to Hyun

We should focus on cost-effective solutions.

Veronique 10 months ago

↳ replying to Hyun

Agreed! Balancing speed and thoroughness is key.

Ammie 10 months ago

↳ replying to Hyun

Quick assessments can be challenging. We need to set clear expectations.

Kaitlyn 10 months ago

↳ replying to Hyun

Maybe starting with a ROM could help?

Cyber AB CMMC-CCA Exam - Topic 3 Question 7 Discussion