< All Topics

An artifact or collection of artifacts that establishes governance over the implementation of CMMC practices and activities. The policy should include the stated purpose, the defined scope, roles and responsibilities of the activities covered by the policy, and any included regulatory guidelines. The policy should establish or direct the establishment of procedures to carry out and meet the intent of the policy and should be endorsed by senior management to show its support of the policy.

Source: CMMC

Click to rate this post!
[Total: 0 Average: 0]
Previous Plan
Next Practice
Table of Contents