SPA - Security Protection Assets (Glossary)

Source: CMMC 2.0 Level 2 Scoping Guide

Term: Security Protection Assets

Asset Description: Assets that provide security functions or capabilities to the contractor's CMMC Assessment Scope, irrespective of whether or not these assets process, store, or transmit CUI

Contractor Requirements:

• Document in the asset inventory
• Document in the System Security Plan
• Document in the network diagram of the CMMC Assessment Scope
• Prepare to be assessed against CMMC practices

CMMC Assessment Requirements: Assess against CMMC practices