A software development company uses a cloud-based source code repository and continuous integration/continuous deployment (CI/CD) platform to manage its software development lifecycle. The cloud service provider hosts and manages the source code repository and CI/CD platform. Which of the following statements accurately describes how the OSC should handle the cloud service provider’s assets in the CMMC Assessment Scope?
Submit