- A useful artifact must relate to the claim being evaluated.
- Freshness and coverage are contextual questions, not automatic labels.
- Preserve uncertainty instead of selecting only the evidence that supports a preferred answer.
Learning objectives
This exercise asks you to compare a small set of synthetic artifacts rather than collect a large evidence library. You will evaluate how well each item answers a defined question, identify a contradiction, and write a limited conclusion. The review dimensions used here are teaching aids, not an official CMMC scoring method. Complete the evidence-and-claims lesson first so you can distinguish a statement from the material offered to support it.
- Evaluate relevance, timing, coverage, and traceability for a specific claim.
- Explain why a polished artifact can still provide weak support.
- Write a conclusion that states what is known and what additional information is needed.
Define the packet's question
The fictional claim is that a training team reviews access to its workspace after personnel changes. Do not silently broaden that into a claim about every system or every security requirement. An evidence item is useful only in relation to the question. A beautifully formatted annual policy may explain intended behavior while saying little about whether a particular review occurred after a recent change.
Use four lenses. Relevance asks whether the item concerns the claim and environment. Timing asks whether it describes the period or event being examined. Coverage asks which people, assets, or activities it includes. Traceability asks whether the reader can understand where the item came from and how it relates to the claimed event. These lenses guide questions; they do not produce an automatic numerical compliance result.
Examine the fictional artifacts
Prepare the following synthetic packet on paper or in a training file. Mark every item as fictional so it cannot later be mistaken for an operational record. Ask learners to annotate the specific question each artifact can answer and the limitation it leaves.
- Artifact A: an approved procedure describing access review, with a clear owner and revision date.
- Artifact B: a current-looking screenshot with no visible system name or explanation of how it was produced.
- Artifact C: a dated review record for the correct workspace that lists the personnel change and the reviewer.
- Artifact D: a later access listing containing a person whose departure is recorded in the review packet.
- Artifact E: a training attendance sheet showing that the reviewer attended a lesson on access concepts.
Worked fictional example: two different conclusions
Fictional learner Aisha first chooses Artifact C as strong evidence that a review was recorded. She then compares it with Artifact D. The later listing raises a question about the review's outcome or subsequent activity. Aisha avoids claiming that the entire process failed without more context. She also avoids ignoring the later listing because it complicates an otherwise reassuring packet.
Her conclusion separates two points: the packet supports that a review record exists, while the continued access shown later needs explanation. She asks whether the listing refers to the same identity and permissions, whether a new authorized role existed, and whether the records' times align. Artifact E may support a training claim, but it cannot resolve those operational questions. The exercise rewards disciplined interpretation rather than the learner who chooses the most documents.
Write and exchange a review note
Write one paragraph containing the claim, strongest relevant item, contradictory or missing fact, and next question. Exchange notes with a peer and ask whether the conclusion is narrower, broader, or equal to what the packet supports. If the peer cannot tell which environment you mean, revise the scope sentence. If the note says fully compliant, explain why that exceeds this limited exercise.
In a second round, add a synthetic record that resolves one uncertainty. Ask learners which part of the conclusion changes and which limitations remain. This develops the habit of updating a judgment when new evidence arrives. Do not let the class rewrite original artifacts to make them agree; preserve their fictional history so the reasoning remains visible and learners practice explanation rather than cosmetic cleanup.
Self-check and answer
Question: Artifact B was captured today, while Artifact C is one month old. Must B be better evidence because it is newer?
Answer: No. Timing matters in relation to the question, and B lacks enough context to establish its scope and origin. C may be more relevant to the personnel-change review even though it is older. Neither should be accepted or rejected by date alone. The reviewer must connect the artifact to the claim and consider any later changes or contradictions. A strong answer explains the tradeoff and requests missing context instead of treating freshness as a universal quality ranking.
Sources & further learning
Use primary sources and the current requirements relevant to your situation. This guide is a learning resource, not a contract-specific or assessment determination.
Learn what evidence can support—and what it cannot
Build on this guide with a connected concept, then explain how the two ideas fit together.
Continue learningWhen the concept becomes a practical question
Consider how readiness software could organize references and review questions; an organized collection still requires careful interpretation.
Explore CMMC Pulsar for evidence organizationSelf-checks are educational reflection activities. They do not confer a credential, demonstrate compliance, or establish certification. Read our editorial approach.