Happy to be done with it and move on to becoming a C3PAO. Personally over prepared for the assessment and ended a day early with a perfect score. One interesting part was that I had to change my company address in SAM to my actual physical address instead of a virtual address (typically used for privacy purposes when having an address for your business online but typically reflects an actual physical location, you just don't work from there and only use the address) because it had to match where I actually was working from and apparently they have to visit your HQ. As a result, they said they had to come to my home for assessment of the physical controls and other stuff like admin MFA with no Internet connection. Was fine with me because I implemented all of the physical controls for my home office. Be careful if you use a virtual address or somewhere that you actually aren't, because they might just have to show up to your address as listed. From what I've heard, assessments can be different based on your group of assessors so maybe others won't have to deal with it, but who knows.

Feel free to ask questions. Biggest thing was having documentation clear and available before the assessment and also understanding exactly which consoles to pull up for what requirements. Like I said I over prepared by essentially taking notes for what I'd show for each objective 😅 I run a fully remote firm so maybe this post relates to others out there.