This page will be a central location for CMMC professionals on the Certified Assessor track. Please send information if you see anything that is useful to CAs and CPs from a career perspective.
Video – what it’s like to be a CMMC Lead Assessor
Certified CMMC Professional (CCP)
Cost:
- $200 application fee to CMMC-AB (non-refundable)
- $2000-$3500 training course for Certified Professional (we strongly recommend Edwards Performance Solutions for this training, which has the best reviews from students. For those on a budget, Space Coast Cybersecurity is the next recommendation)
- Free – Proctored exam for Certified Professional
- Free (but could take months) Tier 3 non-clearance suitability determination, if sponsored by a C3PAO
You can typically get a job in CMMC at this point, either helping companies get ready, or for Mock Assessments / Pre Assessments
If you have your suitability determination, many C3PAOs are allowing their CCPs to participate in Joint Surveillance Assessments.
Certified CMMC Assessor (CCA)
Cost:
- $2000-$3500 – training course for Certified CMMC Assessor (we strongly recommend Edwards Performance Solutions for this training, which has the highest reviews from students)
- Free – Proctored exam for Certified CMMC Assessor
The Cyber-AB Marketplace will list you if you have taken the training and passed the CCA exam. It will show additional “check-marks” if you have passed suitability and if you have participated in three assessments. Your C3PAO is responsible for reporting the assessments to the Cyber-AB.
At this point, if you have your suitability determination and assessment experience, many C3PAOs are allowing their CCAs to lead assessments.
Requirements:
U.S. Citizen and achieve a favorably adjudicated Tier 3 suitability determination
Associated with a C3PAO organization that is authorized to perform assessments
Maintain ethical behavior per Code of Professional Conduct and as needed to maintain Suitability Determination
Lifestyle:
Are you ready to spend your life on the road, or in virtual meetings, visiting 20 different companies or sites per year?
Are you ready to agonize about whether to record a NOT-MET requirement, and take all of the pressure that comes with it, for several months afterward?
Are you willing to continue training and fees to maintain your certified status?