Specialized Assets

Definition

Specialized Assets can process, store, or transmit FCI but cannot be fully secured, such as Internet of Things devices, operational technology, government furnished equipment, restricted information systems, and test equipment. At Level 1 they are not part of the assessment scope.

You do not assess these devices against the Level 1 requirements. The DoD CMMC Scoping Guide, Level 1 adds that there is no documentation requirement for them at Level 1. Knowing they are excluded keeps scope from growing beyond what the requirement actually covers.

Term identity

Term

Specialized Assets

Framework

CMMC · Level 1

Authority

32 CFR § 170.19(b)(2)(ii)