top of page

From CMMCAudit.Org: C3PAO Authorization Levels Explained

Article by Amira Armond and original article can be found here:

Article highlights:

  • The CMMC Accreditation Body clarified in May that there are multiple stages for C3PAOs to pass through and that specific words should be used to describe their status. C3PAOs can be “applicants”, “candidates”, “authorized”, or “accredited”.

  • Redspin, a division of CynergisTek, is the first authorized CMMC Third Party Assessment Organization (C3PAO) to start scheduling assessments.

  • On May 1st, the CMMC-AB sent a letter to C3PAOs clarifying what terms can be used to describe their status. The descriptions for each level can be found in the article.


bottom of page