What Is CMMC Certified Professional (CCP)?

Overview

CMMC Certified Professional (CCP) is a ISACA credential. CMMC CCP exam prep for defense contractor staff, consultants, and future assessors. Covers the six CCP domains and the first step toward CCA. This PathKey™ guide summarizes the domains, format, cost signals, eligibility, and renewal pattern so you can decide before you book. Accumentum is an Army CA and Air Force COOL Approved Vendor. We teach preparation for the ISACA exam. ISACA sets exam content, fees, and policies.

Accumentum is an Army CA and Air Force COOL Approved Vendor. We teach preparation for the ISACA exam. ISACA sets exam content, fees, and policies.

Who it is for

• IT and security staff at defense industrial base companies preparing for CMMC.
• Compliance and GRC leads who run CMMC programs for their organization.
• Consultants who advise defense contractors on CMMC readiness.

Exam domains

Weights follow the official outline.

1. 01

   CMMC Ecosystem and Roles

   Maps to CCP Domain 1, CMMC Ecosystem (5%), Explain the roles of the DoW, the CAICO, the Cyber AB, C3PAOs, CCPs, CCAs, and organizations seeking assessment, and Compare what a CCP can and cannot do on a Level 2 assessment team.

2. 02

   Code of Professional Conduct

   Maps to CCP Domain 2, CMMC-AB Code of Professional Conduct (Ethics) (5%), Apply the guiding principles of the Code of Professional Conduct to real situations, and Recognize conflicts of interest and how to handle them.

3. 03

   FCI, CUI, and Source Documents

   Maps to CCP Domain 3, CMMC Governance and Source Documents (15%), Tell Federal Contract Information (FCI) apart from Controlled Unclassified Information (CUI), and Identify who is responsible for marking, handling, and protecting FCI and CUI.

4. 04

   Level 1 Practices and Evidence

   Maps to CCP Domain 4, CMMC Model Construct and Implementation Evaluation (35%), Work through the 15 Level 1 security requirements in FAR clause 52.204-21, and Apply assessment objectives and methods (examine, interview, test) to each practice.

5. 05

   Level 2 Practices and NIST SP 800-171

   Maps to CCP Domain 4, CMMC Model Construct and Implementation Evaluation (35%), Map Level 2 to the 110 security requirements in NIST SP 800-171 Revision 2, and Evaluate implementation evidence for access control, configuration, incident response, and other families.

6. 06

   The CMMC Assessment Process

   Maps to CCP Domain 5, CMMC Assessment Process (CAP) (25%), Walk through the four CAP phases: plan and prepare, conduct, report, and evaluate outstanding POA&M items, and Understand the CCP role as an assessment team member in each phase.

7. 07

   Reporting and POA&M Closeout

   Maps to CCP Domain 5, CMMC Assessment Process (CAP) (25%), Support the preparation of assessment results, and Understand when a plan of action and milestones is allowed and how closeout is evaluated.

8. 08

   Scoping FCI and CUI Assets

   Maps to CCP Domain 6, Scoping (15%), Apply high-level CMMC scoping as described in the assessment process, and Categorize assets in a given environment and build an appropriate scope.

Exam format and cost

Questions

Confirm on the vendor site

Duration

Confirm on the vendor site

Format

Multiple choice and related item types (confirm on the vendor outline)

Passing score

Confirm the passing score on the vendor site

Cost

Confirm the current exam fee on the vendor site before you register

Delivery

Vendor-approved test center or online proctoring (confirm on the vendor site)

Languages

Confirm available languages on the vendor site

Experience and eligibility

ISACA’s CCP candidate guide lists no experience requirement for CCP. The Cyber AB has recommended a cyber or IT degree, or two or more years of related experience including military, plus CompTIA A+ level knowledge. To be certified, ISACA requires mandatory CCP training through an Approved Training Provider, a passing exam score, the application, and a favorably adjudicated Tier 3 background investigation by the DoW.

Renewal

Renewal rules for CMMC Certified Professional (CCP) are set by ISACA. Many credentials use a multi-year cycle with continuing education, a renewal fee, or a newer exam. Confirm the current cycle on the vendor site.

Roles this credential fits

• The six CCP exam domains, from the CMMC ecosystem and Code of Professional Conduct to Level 1 and Level 2 practice evaluation, the CMMC Assessment Process, and scoping, for people entering defense industrial base cyber compliance.
• CMMC
• Teams standardizing on this credential for hiring or compliance

Official sources

• ISACA credentialing

Always confirm fees, dates, and eligibility on the vendor site before you register. Vendors change outlines and prices without notice.