Description
Certified CMMC Assessor (CCA) Course
-
-
- PREREQUISITE: This course is open to anyone, however, in order to pursue CMMC-AB/Cyber AB/CAICO certification you must meet their requirements outlined in the Becoming an Assessor section below.
- Format: In Classroom (Mesa, Arizona) | CMMC-AB (Provisional) Certified Instructor Led
- Format: Live | CMMC-AB (Provisional) Certified Instructor Led
- Times:
- USA: Standard Course: 8:30 a.m. – 4:30 p.m. (Arizona) Mountain Standard Time
- Europe (Online): 9:00 a.m. – 5:00 p.m. Central European Time/Central European Summer Time
- Middle East (Online): 9:00 a.m. – 5:00 p.m. Gulf Standard Time
- East Asia (Online): 6 a.m. – 2 p.m. Singapore Time (4-Day Program)
- Duration: 4 Days
- Online Courseware
-
Who Should Attend?
- Consultants looking to provide CMMC guidance
- Individuals continuing the CMMC-AB Certified CMMC Assessor or Certified CMMC Instructor career path
What are the prerequisites to get certified?
- Becoming an Assessor
- Read the information at: https://cyberab.org/CMMC-Ecosystem/Ecosystem-roles/Assessing-and-Certification
- Citizenship Requirements
- CCP
- No U.S. citizenship is required for non-certified services or to attend training
- U.S. citizenship required to participate in Level 2 certified assessments
- CCA
- No U.S. citizenship is required for non-certified services or to attend training
- U.S. citizenship required to participate in Level 2 certified assessments
- International C3PAOs
- Must be citizens of the country where the C3PAO is based
- Authorized only to assess contractors based in that country
- The U.S. Government must establish bi-lateral agreements with other countries with respect to CMMC prior to the issuance of any authorizations related to CMMC
- CCP
To become a Certified CMMC Assessor (CCA):
- Review the CCA Exam Blueprint
- Learn more about the CCA Exam Requirements.
- Take CCA training with a Licensed Training Provider (LTP). LTPs can be found through the CMMC Central Marketplace.
- Note: Only individuals successfully trained by an LTP will have access to register to take the CCA exam
- Complete the training survey provided by the AB
- Note: Date of survey release TBD, but if you have successfully completed training and your LTP has submitted your information with CPN you will receive a notification once the survey goes live.
- Pay exam fee, register for exam, and take and pass CCA certification exam
- Note: The CCA exam will tentatively launch in December 2022, registration notifications will go out in November.
- Have or gain a favorable DoD Suitability Determination, or Possess a NAC (National Agency Check) or other DoD accepted clearance
- Only required to participate on certified Level 2 CMMC assessments
Educational approach
This training course is participant centered and:
- Contains lecture sessions illustrated with graphics, examples, and discussions
- Encourages interaction between participants by means of questions, suggestions, exercises based on a case study, quizzes, etc.
- Includes quizzes which are a simulation of the questions of the certification exam
Course Outline
- Lesson 1: Protecting CUI with the CMMC Program
- Topic A: Protect Controlled Unclassified Information
- Topic B: Utilize the CMMC Source Documents
- Lesson 2: Being an Assessor
- Topic A: Identify Assessment Roles and Responsibilities
- Topic B: Establish an Assessor Mindset
- Topic C: Determine the OSC’s Cybersecurity Environment
- Lesson 3: Working Through an Assessment
- Topic A: Identify Assessment Flow and Milestone Events
- Topic B: Prepare to Work with the OSC
- Topic C: Formalize the Plan
- Topic D: Assess the Evidence
- Topic E: Handle Non-Conformity Issues
- Topic F: Finalize the Assessment
- Lesson 4: Validating the Scope of a CMMC Assessment
- Topic A: Define Scope Fundamentals
- Topic B: Categorize the Assets
- Topic C: Determine the OSC Context
- Topic D: Define ESPs
- Topic E: Validate the Assessment Scope
- Lesson 5: Assessing the AC Practices
- Topic A: Evaluate the AC Practices
- Topic B: Identify AC Connections and Considerations
- Lesson 6: Assessing the AT Practices
- Topic A: Evaluate the AT Practices
- Topic B: Identify AT Connections and Considerations
- Lesson 7: Assessing the AU Practices
- Topic A: Evaluate the AU Practices
- Topic B: Identify AU Connections and Considerations
- Lesson 8: Assessing the CA Practices
- Topic A: Evaluate the CA Practices
- Topic B: Identify CA Connections and Considerations
- Lesson 9: Assessing the CM Practices
- Topic A: Evaluate the CM Practices
- Topic B: Identify CM Connections and Considerations
- Lesson 10: Assessing the IA Practices
- Topic A: Evaluate the IA Practices
- Topic B: Identify IA Connections and Considerations
- Lesson 11: Assessing the IR Practices
- Topic A: Evaluate the IR Practices
- Lesson 12: Assessing the MA Practices
- Topic A: Evaluate the MA Practices
- Topic B: Identify MA Connections and Considerations
- Lesson 13: Assessing the MP Practices
- Topic A: Evaluate the MP Practices
- Topic B: Identify MP Connections and Considerations
- Lesson 14: Assessing the PE Practices
- Topic A: Evaluate the PE Practices
- Topic B: Identify PE Connections and Considerations
- Lesson 15: Assessing the PS Practices
- Topic A: Evaluate the PS Practices
- Topic B: Identify PS Connections and Considerations
- Lesson 16: Assessing the RA Practices
- Topic A: Evaluate the RA Practices
- Topic B: Identify RA Connections and Considerations
- Lesson 17: Assessing the SC Practices
- Topic A: Evaluate the SC Practices
- Topic B: Identify SC Connections and Considerations
- Lesson 18: Assessing the SI Practices
- Topic A: Evaluate the SI Practices
- Topic B: Identify SI Connections and Considerations
