Exam CCP topic 1 question 87 discussion

Actual exam question from Cyber AB's CCP

Question #: 87
Topic #: 1

A Lead Assessor has been assigned to a CMMC Assessment. During the assessment, one of the assessors approaches with a signed policy. There is one signatory, and that person has since left the company. Subsequently, another person was hired into that position but has not signed the document. Is this document valid?

A. The signatory is the authority to implement and enforce the policy, and since that person is no longer with the company, the policy is not valid.
B. More research on the company policy of creating, implementing, and enforcing policies is needed. If the company has a policy identifying the authority as with the position or person, then the policy is valid.
C. The signatory does not validate or invalidate the policy. For the purpose of this assessment, ensuring that the policy is current and is being implemented by the individuals who are performing the work is sufficient.
D. The authority to implement and enforce lies with the position, not the person. As long as that position’s authority and responsibilities have not been removed from implementing that domain, it is still a valid policy.

Show Suggested Answer

Suggested Answer: D 🗳️

by 88cfdd0 at Nov. 6, 2025, 3:43 p.m.

Comments

Submit Cancel

88cfdd0

3 weeks ago

Selected Answer: C

This appears to be a limited deficiency practice issue. The practice should be scored as "NOT MET" though the document is valid.

upvoted 1 times

...