CyberAB gt; Home CMMC: managing digital risk for the defense industrial base (DIB) and Beyond
Overview | Cyber-AB Our Mission The Cyber AB is the official accreditation body of the Cybersecurity Maturity Model Certification (CMMC) ecosystem and the sole authorized non-governmental partner of the U S Department of Defense (DoD) in implementing and overseeing the CMMC conformance regime
FAQ | Cyber-AB The first step to becoming a C3PAO is for a representative of the company to fill out the application form at cyberab org Applicants are then screened in multiple steps The Cyber AB has partnered with Dunn and Bradstreet (D N) to provide a risk assessment of each applicant which includes analysis and scoring of up to 15 factors
Training and Instructors | Cyber-AB CMMC Instructors The training community is a vital part of the CMMC ecosystem that facilitates the development of expertly trained CMMC Assessors who will work for the C3PAO organizations that will be responsible for assessing CMMC compliance for Organizations Seeking Certification (OSC) Developing trained Instructors is just as important for building the CMMC ecosystem Trained CMMC
Consulting and Implementation | Cyber-AB Individuals holding any level of an RP designation can provide CMMC implementation consulting services to assist in identifying gaps and providing mitigation strategies for an OSC preparing for an assessment RPs work for Registered Practitioner Organizations (RPO) but can also be contracted as individuals Individuals who hold an RP designation can also pursue becoming a Certified CMMC
DIB Companies (OSCs) | Cyber-AB Although the certification process for Organizations Seeking Assessment (OSCs) is yet to begin, it is essential for organizations to start implementing the CMMC standard, closely aligned with NIST SP 800-171 (and NIST SP 800-172 for Level 3 Certifications) Prime contractors should also take steps to prepare their subcontractors, as the specific contract awarded will determine the required
Ecosystem Roles | Cyber-AB The CAICO is currently NOT accepting new APP applications APP An Approved Publishing Partner (APP) is an organization that has been vetted by the Cybersecurity Assessor Instructor Certification Organization (CAICO) and have been approved to participate as part of the CMMC ecosystem as an LPP These partners are responsible for creating quality CMMC training curriculum that are utilized by
How Do I Become A Member? | Cyber-AB All participants must demonstrate a foundational understanding of the CMMC framework, pass a background check, and adhere to a rigorous code of professional conduct These criteria are assessed and managed through the automated enrollment process