From consultant to CMMC leader

“In roughly nine months, I was able to start my Tier 3 [security background check], complete my CMMC Certified Professional (CCP) and CMMC Certified Assessor (CCA) exams, complete my required DoD 8140 certification and now I’m leading assessments,” says James. "Infosec Institute is, uniquely, the reason that I'm in my position right now."

While James' timeline is impressive, his approach is replicable with the right experience and support. 

The challenge: Building expertise while navigating change

James faced a common dilemma. The market desperately needs qualified CMMC assessors, but getting certified while working full-time as a CISO seemed nearly impossible. He had to validate his expertise to protect both his organization and their clients, but traditional training approaches wouldn't fit his packed schedule.

Another challenge? The CMMC ecosystem was still evolving. The final rule for the updated CMMC 2.0 was set to go into effect in December 2024, shortly after James planned to complete his CCP and CCA training. He needed a partner who would prepare him not just for current requirements but also for the upcoming CMMC changes.

With CMMC requirements shifting and new interpretations emerging regularly, James needed more than just exam preparation. He required training that would give him the deep expertise and ongoing support to navigate an evolving regulatory landscape.

The solution: Expert instruction for an evolving landscape

I was drawn to Infosec for my two boot camps because Infosec has been pivotal in the rollout of CMMC over the last six years," James explains. This wasn't theoretical training from newcomers — it was preparation from an organization that had been involved since the beginning.

Instructor quality was non-negotiable for James. He needed someone with proven experience and credibility. "Infosec has developed relationships with certified instructors who actually know how to support the defense industrial base, and that makes a huge difference," James says.

The live online format also solved James' scheduling challenge. "Infosec's facilitated learning over Zoom made a big difference, primarily because every session was recorded. If I ever needed to go back and watch what was discussed, I could." This flexibility allowed him to balance his full-time CISO responsibilities while accessing comprehensive training.

Perhaps most importantly, Infosec prepared James for the long term. "Infosec has uniquely prepared me for any CMMC retraining that will take place inevitably in the future. With them, it’s not just about completing the certification; it's about being a true contributor to the ecosystem.”

The results: Career transformation and team success

James achieved his Lead CCA certification while maintaining his demanding schedule. The transformation positioned him to lead assessments and build teams while ensuring long-term professional growth.

Your path to CMMC leadership

James advocates for professionals to make the investment now. His advice is direct: "If you want to pursue a career related to CMMC and have technical acumen and enjoy working with people, go through a boot camp from Infosec Institute and apply for a job at cybernines.com/careers, or any of the other C3PAOs.”

“Because when you've completed one of these trainings, we know that you've made the investment in yourself that you want to be a part of the CMMC ecosystem for decades to come."

Ready to follow James' path toward CMMC leadership? Infosec training doesn't just prepare you for certification — it positions you for long-term success in the growing CMMC field with the expertise, support and connections you need to thrive.