CMMC CCA

Practice session

An OSC implements role-based access control where users are assigned to groups that determine their system access. However, the OSC cannot demonstrate that access permissions are reviewed on a periodic basis. What is the appropriate finding for AC.L2-3.1.4 (Access Enforcement)?

Loading your practice session…