Definition
CMMC Scope
A CMMC Level 1 term.
Definition
Scope is the set of assets that process, store, or transmit Federal Contract Information, except Specialized Assets. Under 32 CFR 170.19(b)(2)(ii), Specialized Assets such as IoT devices, operational technology, government furnished equipment, and test equipment can handle FCI and are still not part of the Level 1 assessment scope. The in-scope assets are what a Level 1 self-assessment covers.
The rule has you specify the scope before the self-assessment starts. Getting it right matters, because a system that handles FCI and is left out of scope by mistake is never assessed. Specialized Assets are the one category the rule sets outside the Level 1 scope on purpose. Setting the scope is a boundary decision you make about your own environment.
Term identity
- Term
- CMMC Scope
- Framework
- CMMC · Level 1
- Authority
- 32 CFR § 170.19
Related Definitions
Related Questions
- GuideWhat is the difference between FCI and CUI?
- GuideWhat is the difference between CMMC Level 1 and Level 2?
- GuideWho needs CMMC Level 1?
- GuideDo I Need GCC High or a FedRAMP Cloud for CMMC Level 1?
- GuideWhat Does CMMC Level 1 Require of My MSP or IT Provider?
- GuideWhat Is a CMMC UID, and Who Do I Give It to at Level 1?
Primary Sources
Cite This Page
“CMMC Scope: CMMC Level 1 Definition.” AssessrLog, a product of ProfytAI Pte. Ltd.. https://assessrlog.com/cmmc/definitions/cmmc-scope/