Understanding Affirmations in a CMMC AssessmentAffirmations are a type ofevidencecollected during aCMMC assessmentto confirm compliance with required practices. Affirmations are typically collected from:
✅Interviews– Conversations with personnel implementing security practices.
✅Demonstrations– Observing the practice in action.
✅Emails and Messaging– Written communications confirming compliance efforts.
✅Presentations– Documents or briefings explaining security implementations.
✅Screenshots–Visual evidenceof system configurations and security measures.
TheCMMC Assessment Process (CAP) Guidestates that assessors may collectaffirmations via various communication methods, including emails, messaging, and presentations.
Screenshotsare an additional valid form ofobjective evidenceto confirm compliance.
Options A and B are incorrectbecause emails and messaging are explicitlyallowedforms of affirmation.
Option C is incompletebecause it does not mention screenshots, which are also considered valid evidence.
Why "Yes, the affirmations collected by the assessor are all appropriate, as are screenshots" is Correct?Breakdown of Answer ChoicesOption
Description
Correct?
A. No, emails are not appropriate affirmations.
❌Incorrect–Emailsarea valid affirmation method.
B. No, messaging is not an appropriate affirmation.
❌Incorrect–Messagingisallowed for collecting affirmations.
C. Yes, the affirmations collected by the assessor are all appropriate.
❌Incorrect–Screenshots should also be considered valid evidence.
D. Yes, the affirmations collected by the assessor are all appropriate, as are screenshots.
✅Correct – Screenshots are also a valid form of affirmation.
CMMC Assessment Process Guide (CAP)– Defines allowable evidence collection methods, including affirmations through written communication.
Official References from CMMC 2.0 DocumentationFinal Verification and ConclusionThe correct answer isD. Yes, the affirmations collected by the assessor are all appropriate, as are screenshots.This aligns withCMMC 2.0 assessment proceduresfor collecting affirmations.
