Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
CMMC-AB Certified Professional Boot Camp
Start your CMMC journey by becoming a CMMC-AB Certified Professional (CMMC-AB CP)! This five-day boot camp provides a comprehensive overview of the new Cybersecurity Maturity Model Certification requirements and prepares you to earn your CMMC-AB CP, which is the first step to becoming a CMMC-AB Certified Assessor.
Developed by the Office of the Under Secretary of Defense for Acquisition and Sustainment (OUSD A&S) and other federal stakeholders, the Cybersecurity Maturity Model Certification (CMMC) assesses and enhances the cybersecurity posture of the Defense Industrial Base. The CMMC encompasses multiple maturity levels that range from Basic cybersecurity hygiene to Advanced/progressive.' The required CMMC level will be specified in requests for information (RFIs) and requests for proposals (RFPs) for DoD contracts.
Course Overview
Certified Professionals and Certified Assessors must meet citizenship requirements defined by the CMMC-AB:
- Certified Professionals and CA-1 Assessors: U.S. person (U.S. citizenship is required to participate as a team member on ML-2 assessments)
- CA-3 and above: U.S. citizenship is required
- International C3PAOs: Must be a citizen of the country where the C3PAO is based, will be authorized only to assess contractors based in that country, and the U.S. Government must establish bi-lateral agreements with other countries with respect to CMMC prior to the issuance of any authorizations related to CMMC
Learning Objectives
- Understand the CMMC model, its history, need and development
- Articulate the CMMC model framework, its constructs and usage
- Demonstrate an understanding of applicable legal and regulatory guidance, roles and responsibilities as it pertains to the handling of controlled data (FCI/CUI) within the DoD
- Understand how to engage supplemental materials (such as NIST 800-171, ISO 27001) to further inform practice characterization
- Demonstrate how CMMC practices are influenced by the progression of CMMC maturity processes
- Demonstrate relationships between practices and their applicable capabilities/domains
- Understand the CMMC assessment methodology, its requirements and work flows
- Demonstrate an understanding of the Code of Professional Conduct/COE through practical example
Framework Connections
The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):
Competency Areas
Work Roles
Feedback
If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@mail.cisa.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.