- Duration: 4 days
Course Overview
The Certified CMMC Professional training course provides comprehensive knowledge of the Cybersecurity Maturity Model Certification (CMMC) 2.0 framework, its requirements, ecosystem, and assessment process. Participants will develop an understanding of CMMC levels, domains, practices, relevant regulatory requirements, and the procedures involved in defining CMMC assessment scope.
The course explores the relationship between CMMC and key cybersecurity references, including FAR 52.204-21, DFARS 252.204-7012, and NIST SP 800-171. It also covers the roles and responsibilities of CMMC ecosystem stakeholders, the protection of Federal Contract Information (FCI) and Controlled Unclassified Information (CUI), and the CMMC Code of Professional Conduct.
Upon successful completion of the training and examination, eligible participants can apply for the Certified CMMC Professional credential, subject to the applicable Cyber AB certification requirements.
Learning Objectives
Upon successfully completing this training course, participants will be able to:
- Understand the relationship between the CMMC model, FAR 52.204-21, DFARS 252.204-7012, NIST SP 800-171, and other relevant regulations and frameworks.
- Explain CMMC levels, domains, and cybersecurity practices.
- Interpret CMMC requirements in the context of an Organization Seeking Certification (OSC).
- Support organizations in planning and implementing the controls required to achieve their applicable CMMC level.
- Identify the roles and responsibilities of stakeholders within the CMMC ecosystem.
- Understand and apply the principles of the CMMC Code of Professional Conduct.
- Identify and interpret CMMC source documents and supplementary reference materials.
- Explain the CMMC assessment process, its phases, and the role of a Certified CMMC Professional.
- Understand the principles of CMMC high-level scoping.
Target Audience
This training course is intended for:
- Professionals and managers involved in implementing CMMC requirements within organizations seeking certification.
- Individuals interested in participating in the CMMC ecosystem as assessment team members or pursuing the Certified CMMC Assessor pathway.
- Cybersecurity and information technology consultants.
- Federal government employees.
- Professionals seeking to understand the CMMC model and its requirements.
- Consultants providing CMMC readiness, preparation, and implementation support.
- Individuals working with organizations that handle Federal Contract Information (FCI) or Controlled Unclassified Information (CUI).
Course Content
Day 1: Introduction to CMMC Stakeholders, Ecosystem, References, FCI, and CUI
- Training course objectives and structure
- CMMC stakeholders and ecosystem
- Department of Defense cybersecurity standards and regulations
- CMMC framework overview
- CMMC source documents
- Categories of unclassified information
Day 2: CUI Protection, CMMC Model, and CMMC Domains
- Identification, marking, and safeguarding of CUI
- CUI storage, sharing, dissemination, and destruction
- Overview of the CMMC model
- CMMC domains and their structure
- Relationship between information protection requirements and CMMC practices
Day 3: CMMC Levels 1 and 2
- CMMC Level 1 requirements and practices
- CMMC Level 2 requirements and practices
- Understanding and interpreting applicable cybersecurity practices
- Relationship between CMMC requirements and supporting standards
- Applying CMMC requirements within organizational environments
Day 4: CMMC High-Level Scoping, Assessment Process, and Professional Conduct
- CMMC high-level scoping principles
- Overview of the CMMC assessment process
- Assessment phases and the responsibilities of relevant stakeholders
- Role of the Certified CMMC Professional in the assessment process
- CMMC Code of Professional Conduct
- Ethical considerations and professional responsibilities
- Course review and closing session
Examination and Certification
Examination Details
- Examination duration: 3 hours
- Examination: Certified CMMC Professional Exam
- Examination provider: Delivered by organizations participating in the Cyber AB certification process
- Assessment focus: Knowledge of the CMMC model, supporting documentation, applicable legal and regulatory requirements, and the CMMC ecosystem.
The examination covers the following domains:
- CMMC Ecosystem
- CMMC-AB Code of Professional Conduct (Ethics)
- CMMC Governance and Source Documents
- CMMC Model Construct and Implementation Evaluation
- CMMC Assessment Process (CAP)
- Scoping
PECB is an Approved Publishing Partner (APP) authorized by the Cyber AB to develop training courses based on Cyber AB curricula and examination objectives. The examination is developed and delivered through organizations participating in the Cyber AB certification process.
Certification Requirements
To obtain the Certified CMMC Professional credential, candidates must satisfy the applicable requirements established by the Cyber AB.
| Requirement | Details |
| Examination | Successfully pass the Certified CMMC Professional Exam |
| Education or experience | A college degree in a cyber or information technology-related field, or at least two years of equivalent experience, including military experience, in cybersecurity, information technology, or assessment |
| Training | Complete the Certified CMMC Professional class delivered by a Licensed Training Provider (LTP) |
| Additional requirement | Complete the DoD CUI Awareness Training |
| Professional conduct | Comply with applicable professional conduct and certification requirements |
Candidates should verify the latest eligibility criteria and certification procedures directly with the Cyber AB before applying.
Course Benefits
Upon completing this training course, participants will benefit from:
- CMMC Framework Knowledge: Understand the structure, levels, domains, and practices of the CMMC 2.0 model.
- Regulatory Awareness: Develop knowledge of relevant Department of Defense cybersecurity requirements and supporting standards.
- CMMC Implementation Support: Build the knowledge required to support organizations preparing for CMMC certification.
- Assessment Process Awareness: Understand CMMC assessment phases, high-level scoping, and the responsibilities of ecosystem participants.
- Professional and Ethical Practice: Gain awareness of the CMMC Code of Professional Conduct and the ethical expectations of the profession.
- Career Development: Prepare for participation in CMMC-related cybersecurity, consulting, and assessment support activities, subject to applicable authorization and eligibility requirements.
Training Materials and CPD Credits
- Participants will receive training materials containing over 450 pages of explanatory content, examples, best practices, exercises, and quizzes.
- Participants who attend the training course will receive an attendance record worth 28 Continuing Professional Development (CPD) credits.
Prerequisites
No specific prerequisite certification is stated for attending the course. However, candidates seeking the Certified CMMC Professional credential must meet the applicable education or experience requirements, complete the required training through a Licensed Training Provider, pass the examination, and complete the DoD CUI Awareness Training.
Certification Body
The Cyber AB is authorized by the U.S. Department of Defense to serve as its sole non-governmental partner for monitoring CMMC compliance and managing CMMC training and certification.
PECB is an Approved Publishing Partner authorized to develop training courses aligned with the Cyber AB curricula and examination objectives.