Certified CMMC Professional (CCP) — Question 17

Where does the requirement to include a required practice of ensuring that personnel are trained to carry out their assigned information security-related duties and responsibilities FIRST appear?

Answer options

• A. Level 1
• B. Level 2
• C. Level 3
• D. All levels

Correct answer: D

Explanation

The requirement for training personnel in their information security roles is established at all levels, making 'All levels' the correct choice. Levels 1, 2, and 3 may outline specific practices, but the foundational requirement for training is present universally.