CMMC Annual Affirmation: Who Signs and What It Means

Affirmation turns a point-in-time assessment into an ongoing accountability loop. The signatory is asserting continued compliance posture — not that the organisation is finished with security work.

Treat affirmation as an executive control: evidence freshness, change management, and incident disclosure processes must support the statement.

Governance tip: Document who may sign, what packet they review, and how material changes trigger re-evaluation — before the affirmation date arrives.

Who typically signs

Programme rules designate an affirming official with authority over the assessed environment. Align title, delegation letters, and board awareness with counsel and contracts — do not improvise at filing time.

What a defensible affirmation packet includes

Current SSP and boundary diagrams
Open POA&M status where applicable
Significant change log since assessment
Monitoring and incident summary evidence

Operating between assessment and affirmation

Continuous control monitoring, access reviews, and ticketed remediation keep the affirmation honest. A GRC workspace plus SIEM evidence reduces last-minute scrambling.

How CyberSilo Helps

Evidence mapping in CyberSilo CSA
Detection and logging proof with ThreatHawk SIEM
Advisory scoping — contact CyberSilo

Talk to CyberSilo

Map evidence and operations with CyberSilo CSA and ThreatHawk.

Talk to CyberSilo CMMC hub

Frequently Asked Questions

Is affirmation the same as re-assessment?

No. Affirmation asserts continued compliance between formal assessments under programme rules.

What if we had a major incident?

Escalate to counsel and the affirming official; material changes may affect what can be affirmed.

Can a consultant sign for us?

Signing authority is an organisational responsibility — advisors prepare packets; they do not replace the designated official.

CMMC Annual Affirmation: Who Signs and What It Means

Who typically signs

What a defensible affirmation packet includes

Operating between assessment and affirmation