CMMC Update 9/14/2020

Updated: Jan 13




Currently, there are no companies or assessors who are authorized by the CMMC-AB to charge or provide any assistance to any companies. At this time there has been no CMMC pricing structure for RPO RP implementations or C3PAO Assessments provided.


What ISOP has done to make sure we are able to assist our clients with CMMC is the following:

  1. Registered our audit coordinators in the CMMC-AB Registered Practitioner (RP) training.

  2. This training will be developed soon after the results of this first Provisional Assessor Training is studied.

  3. Registered with the CMMC-AB to be a Registered Provider Organization (RPO) which will manage RPs.

  4. Registered with the CMMC-AB to be a Certified Third-Party Assessment Organization (C3PAO) which will manage Assessors.

  5. Contracted with Assessors who have registered with the CMMC-AB to become CMMC ML-1 authorized?

  6. Cross mapped all applicable ISO standards with CMMC ML-1

  7. Remember CMMC Maturity Level 1 (ML-1) is the only level required by the end of 2021!

The CMMC Accreditation Body (AB) has started the Provisional Assessor Training Program. The first 25 Provisional Assessors have completed their training.


The Provisional Assessors will not be giving any official thumbs-up or thumbs-down to contractors. Instead, they will be doing mock assessments to give feedback to the CMMC-AB, the DOD and the participating contractors. Once the AB accredits certified third-party assessment organizations (C3PAOs) and Assessors, they will be able to charge companies for assessments.


All DoD contracts must meet CMMC requirements by 2025.


Look for our next CMMC update !