Generating an FCI asset scope

Where an OSC handles FCI but no CUI, the Level 1 scoping rules apply: assets that process, store or transmit FCI are in scope.

Recall

The terms and figures from this lesson, one at a time.

Card 1 of 1Level 2 of 5

For an OSC handling only FCI, which assets are in scope?

This deck does not remember you yet. Spaced repetition arrives with accounts.

1. An OSC handling only FCI is determining scope. Which assets are in scope?

Only assets located in Government facilitiesThose that process, store or transmit FCIEvery asset the OSC ownsOnly assets connected to the internet

By QualExam editorial. Written against the awarding body’s published blueprint and checked against it on every build.

Source: ISACA CCA/CCP Exam Candidate Guide

Last checked against the source: 2026-09-22