For those of you that have been participating as a 1099 CCP or CCA, can you provide some detail as to what your interaction is with an OSA or OSC when it comes to:

1. The 1099 Contractor Agreement
2. How many controls do you assess?
3. Is there a minimum contracting time you agree to (for example, minimum 5 hours at $180/hour)?
4. Do you state a specific set of controls that you assess or do you agree to assess any/all controls? Do you have preferred controls that you assess and do not assess others?
   1. For example, do you only agree to assess Access Control and Configuration Management controls?

Just looking to get the rundown of how you operate.