CCA Ethics, Standards & Professional Conduct Flashcards
6 cards from real CCA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 CCA Ethics, Standards & Professional Conduct flashcards as text
What continuing education requirement must CCAs fulfill to maintain their certification?
Answer: CCAs must complete Cyber AB-required continuing professional education (CPE) credits each year
CCAs must complete continuing professional education credits as required by the Cyber AB to maintain current knowledge of CMMC requirements, assessment methodologies, and cybersecurity developments.
What is the significance of the CCA oath or attestation taken at certification?
Answer: It commits the CCA to uphold the Cyber AB Code of Professional Conduct and perform assessments with integrity and objectivity
The CCA attestation is a formal commitment to uphold professional standards, objectivity, and the Cyber AB's Code of Professional Conduct throughout the assessor's certification period.
How should a CCA respond if an OSC representative attempts to coach or influence the assessor's findings during the assessment?
Answer: Politely decline and document the attempt, maintaining independent judgment based on evidence
Assessors must maintain independence; any attempt to influence findings should be declined and documented, as it represents a potential integrity issue that must be recorded.
What is the consequence for a CCA who knowingly certifies an OSC that does not meet CMMC requirements?
Answer: Potential decertification, civil liability under the False Claims Act, and possible criminal charges
A CCA who fraudulently certifies non-compliant organizations faces decertification by the Cyber AB, civil liability under the False Claims Act, and potentially criminal prosecution for fraud against the government.
What does 'professional skepticism' mean for a CCA assessor?
Answer: Maintaining a questioning mind and critically assessing evidence rather than accepting all representations at face value
Professional skepticism means critically evaluating evidence and not simply accepting OSC assertions as fact, seeking corroborating evidence to ensure findings are based on objective observation rather than trust.
Under what circumstances may a CCA share OSC assessment findings with parties outside the C3PAO and OSC?
Answer: Only when required by law, court order, or explicitly authorized by the OSC
CCA confidentiality obligations restrict sharing of assessment findings to situations required by law, compelled by court order, or explicitly authorized by the OSC, protecting the OSC's sensitive security information.