CMMC Assessment Requirements for External Service Providers
Are you confused about the how External Service Providers (ESPs) fit into an organizations CMMC assessment?
You’re not alone! The CyberAB Town Halls have recently spent a significant amount of time discussing this.
Here is a easy to follow decision chart that I put together. It agrees with 32 CFR as well as the information presented by Matt Travis at the CyberAB Town Hall and other forums.
I am going to do a podcast on this soon. So, stay tuned. In the meantime, please look at the chart and let me know any questions that you have!