The organization employs assessors or assessment teams with [Assignment: organization-defined level of independence] to conduct security control assessments.
CA-2 (1) Additional FedRAMP Requirements and Guidance:
Requirement:For JAB Authorization, must use an accredited Third Party Assessment Organization (3PAO).