What must a CCA assessor do if an OSC provides documentation that appears to have been created specifically for the assessment rather than representing actual operations?
-
A
Accept the documentation without question
-
B
Flag the concern, seek corroborating evidence through interviews and system observations, and document the discrepancy
-
C
Immediately terminate the assessment and report fraud to DoD IG
-
D
Request the OSC to backdate the documentation