The Lead Assessor is responsible for protecting and maintaining all assessment records, notes, and information gathered during the assessment process. This includes working papers and supplemental documentation that may be needed for auditability or dispute resolution.
Supporting Extracts from Official Content:
* CAP v2.0, Post-Assessment Responsibilities (§3.17): "The Lead Assessor must ensure that all assessment artifacts, notes, and information are archived or disposed of in accordance with C3PAO policy." Why Option A is Correct:
* The CAP specifies that notes and information from the assessment must be preserved or disposed of according to policy.
* Options B, C, and D list items not required in the CAP. The "letter" and "quality control report" are not part of the Lead Assessor's required maintained materials.
References (Official CMMC v2.0 Content):
* CMMC Assessment Process (CAP) v2.0, Phase 3 Post-Assessment (§3.17).