Certified Cybersecurity Maturity Model Certification (CMMC) Professional (CCP) Practice Exam

Which document outlines the CMMC framework for an OSC?

1. CMMC Assessment Guide

2. CMMC Model

3. CMMC Operational Plan

4. CMMC Compliance Report

The correct answer is: CMMC Model

The CMMC Model serves as the foundational document that outlines the structure, requirements, and levels of the Cybersecurity Maturity Model Certification framework for an Organization Seeking Certification (OSC). It integrates various cybersecurity practices and processes that an OSC must implement to achieve compliance at different maturity levels. The model delineates key aspects such as the domains, capabilities, and specific practices that are necessary for protecting Controlled Unclassified Information (CUI) in accordance with the Department of Defense (DoD) requirements. Other documents, while related to the assessment and implementation of the CMMC, do not encapsulate the framework itself as comprehensively as the CMMC Model does. For example, the CMMC Assessment Guide provides guidance on how assessments are conducted, and the CMMC Operational Plan details an organization's strategy to achieve compliance, but neither of these documents summarizes the complete CMMC structure and requirements like the CMMC Model does. Additionally, the CMMC Compliance Report outlines a specific OSC's compliance status following an assessment rather than defining the framework. Thus, the CMMC Model is the crucial document laying the groundwork for understanding and adhering to CMMC standards.