Cybersecurity Maturity Model Certification training
Build the knowledge and assessment skills needed to navigate CMMC. Infosec helps defense contractors, cybersecurity professionals and assessment teams understand the CMMC ecosystem and prepare for CMMC Certified Professional and CMMC Certified Assessor certifications.
Approved Training Provider
Understanding CMMC
The Cybersecurity Maturity Model Certification, or CMMC, is a U.S. Department of War program designed to help protect sensitive unclassified information handled by organizations across the Defense Industrial Base.
CMMC uses a tiered model based on the type and sensitivity of the information an organization handles. It addresses the protection of Federal Contract Information and Controlled Unclassified Information and provides a common approach for evaluating whether required cybersecurity safeguards are in place.
As an Approved Training Provider for CMMC, Infosec Institute delivers training through the official CMMC ecosystem to help professionals understand these requirements, prepare for certification and build the skills needed to support CMMC readiness and assessments.
Earn your CMMC certification
Build the knowledge and assessment skills needed to support CMMC readiness and certification. Start with CCP to develop a foundation in CMMC requirements and assessment activities, then advance to CCA to conduct formal CMMC Level 2 certification assessments.
CMMC resources
CMMC frequently asked questions
What is CMMC?
CMMC is a U.S. Department of War program designed to help ensure that organizations in the Defense Industrial Base protect Federal Contract Information and Controlled Unclassified Information using appropriate cybersecurity safeguards.
Who needs to understand CMMC?
CMMC is relevant to defense contractors and subcontractors, professionals responsible for protecting FCI or CUI, consultants supporting readiness and individuals who want to participate in the CMMC assessment ecosystem.
Is CMMC certification for organizations or individuals?
Both concepts exist, but they are different. Organizations demonstrate their implementation of applicable CMMC cybersecurity requirements. Individuals earn credentials such as CCP and CCA to support readiness and assessment activities.
What is the difference between CCP and CCA?
CCP is the foundational professional certification for supporting CMMC readiness and participating on assessment teams. CCA is the advanced certification for professionals who conduct formal CMMC Level 2 certification assessments. An active CCP certification is required before becoming a CCA. CCAs can also move into a lead position and become a Lead CMMC Certified Assessor (LCCA).
Who manages CMMC professional training and certification?
ISACA serves as the CMMC Assessor and Instructor Certification Organization (CAICO) and manages professional training, exams and credentials. The Cyber AB remains the official accreditation body for the CMMC ecosystem. Infosec delivers approved CMMC training as an Approved Training Provider.
Can Infosec provide CMMC training for teams?
Yes. Infosec provides CMMC training for individual professionals and organizations that want to build shared knowledge and certification capabilities across their teams. We offer live online, in-person and team onsite CMMC training options.