CMMC Certified Assessor (CCA) is the next step for CCPs who are looking to take their career to the next level as Assessors.
The Cybersecurity Maturity Model Certification (CMMC) program, managed by The Cyber AB (formerly known as the CMMC Accreditation Body or the CMMC-AB), is designed to validate defense contractors’ compliance with the cybersecurity practices required by their contracts. Once rulemaking has concluded and CMMC 2.0 has been fully implemented, all organizations providing products or services to the United States Department of Defense (DoD) must achieve the CMMC level required in the desired contract.
The CMMC program is poised to explode within the next year, and many new consultants and assessors will be necessary to meet the needs of the program.
CMMC assessors are qualified individuals or organizations authorized by The Cyber AB to evaluate and assess organizations against the CMMC framework. They conduct on-site or remote assessments to determine if an organization meets the required cybersecurity practices and processes for certification.
Audience:
- Individuals interested in becoming CMMC Certified Assessors (CCA)
- CMMC Certified Instructors (CCI) who want to teach the CCA course in the future
- Employees in the Defense Industrial Base (DIB)
- Compliance officers and staff
- Prospective CMMC consultants
Course Objectives:
This course covers identifying the scope of an Assessment, assessing the CMMC Level 2 practices, and using an established process and workflow to enable efficiencies during an Assessment. In this course, you will apply the CMMC Assessment Process to validate the performance of cybersecurity practices in the 14 domains derived from NIST SP 800-171.
You will:
- Protect CUI with the CMMC program.
- Establish the key elements of your responsibilities as a professional CMMC Assessor.
- Work through an Assessment.
- Validate the context and scope of a Level 2 CMMC Assessment.
- Assess the practices in the Access Control (AC) domain.
- Assess the practices in the Awareness and Training (AT) domain.
- Assess the practices in the Audit and Accountability (AU) domain.
- Assess the practices in the Security Assessment (CA) domain.
- Assess the practices in the Configuration Management (CM) domain.
- Assess the practices in the Identification and Authentication (IA) domain.
- Assess the practices in the Incident Response (IR) domain.
- Assess the practices in the Maintenance (MA) domain.
- Assess the practices in the Media Protection (MP) domain.
- Assess the practices in the Personnel Security (PS) domain.
- Assess the practices in the Physical Protection (PE) domain.
- Assess the practices in the Risk Assessment (RA) domain.
- Assess the practices in the System and Communications Protection (SC) domain.
- Assess the practices in the System and Information Integrity (SI) domain.
Certification Exam Preparation:
This course is designed for CMMC Certified Professionals (CCPs) who are interested in becoming CMMC Certified Assessors (CCAs). It prepares students for the CMMC Certified Assessor (CCA) certification exam, which is a required step toward becoming an Assessor.
To assist you in your preparation for the exam, Logical Operations provides a reference document that indicates where the material for the CCA exam objectives is covered in the Logical Operations CMMC Certified Assessor (CCA) courseware.
Prerequisites:
To ensure your success in this course, you must have the foundational cybersecurity knowledge of a CMMC Certified Professional, which you can obtain by taking the following course and exam:
- CMMC Certified Professional (CCP)
This is an unofficial summary provided for your convenience. Always refer to The Cyber AB website (https://cyberab.org/CMMC-Ecosystem/Ecosystem-Roles/Assessing-and-Certification) for official requirements and be aware that CMMC requirements are subject to change.
