Should your application requires your clients to enter their info on their very own devices, You then qualify for SAQ A. Assessment requests and check with any queries (pro suggestion- it’s essential to opt for a skilled auditing organization that’s in a position to reply queries throughout the whole audit https://www.nathanlabsadvisory.com/blog/nathan/achieve-fisma-compliance-in-the-usa-avoid-risks-and-stay-secure/