Popular: CMMC CCP Boot Camp Bookstore Contract Vehicles
8865 Stanford Blvd., Suite 202, Columbia, MD 21045
Cyber AB Approved Training Provider
Earn your CCPCMMC Certified Professional: the foundational CMMC certification, and the required first step toward becoming a CMMC Certified Assessor (CCA). in five days of live, online classes taught by working CMMC assessors.
See all CCP class dates Open the full catalog (opens in a new tab)
Live CCP Training Schedule
Every live class is online, Monday to Friday, 9 AM to 5 PM Eastern. Pick your week, or choose a self-paced option below.
November 2–6, 2026
Registration closed
This class is full. Join us in December.
Now enrolling
December 7–11, 2026
$3,295
Enroll in December (opens in a new tab)Early 2027 classes
Be first to know when registration opens.
Get notifiedLook for the same picture in our learning portal to find the right course.
Live online
5-Day CCP Boot Camp
Live classes with a CMMC instructor, Monday to Friday.
$3,295
Choose a date (opens in a new tab)
Hybrid
CCP at Sea
Earn your CCP on a cruise, with online study before you sail.
$1,350
Explore CCP at Sea
Come to class familiar with these official DoD guides. We’ll go deep on each one.
We’ll send you the latest CAPCMMC Assessment Process: the official playbook assessors follow from planning through final results. document before class starts. Need an accommodation? Email CustomerSupport@EdwPS.com.
Training a whole team? Ask about a private class. Other questions? Email training@edwps.com or call 443.561.1334.
Who CCP Training Is For
Anyone who needs to truly understand CMMC: the people who advise on it, prepare for it, or plan to assess it. No cybersecurity experience is required.
Consultants & Providers
A strong fit for
MSPs, MSSPsManaged Security Service Providers: outside companies that monitor and manage security for their clients., cybersecurity consultants, and Registered Practitioners at RPOsRegistered Practitioner Organizations: companies registered with The Cyber AB to help clients prepare for CMMC..
Learn CMMC well enough to explain the requirements, help clients scope their environment, and show how NIST SP 800-171 connects to the assessment.
Speak with confidence to clients, assessors, and leadership.
Train your whole team privately
Defense Contractors
A strong fit for
IT, cybersecurity, compliance, contracts, legal, and leadership teams getting ready for CMMC.
Understand CUIControlled Unclassified Information: sensitive government information, like drawings or specs, that the law requires you to protect. and FCIFederal Contract Information: details about a government contract that aren’t meant for the public, like pricing or schedules., what evidence assessors expect, how scoping works, and how to work with consultants and C3PAOsCertified Third-Party Assessment Organizations: companies authorized by The Cyber AB to perform official CMMC Level 2 assessments..
Build CMMC know-how in-house instead of paying outsiders to explain every decision.
Need help preparing? See CMMC consulting
Future Assessors
A strong fit for
Professionals heading toward assessor training or a role on a C3PAO assessment team.
CCP is the required first step before CCACMMC Certified Assessor: the certification required to perform official CMMC Level 2 assessments. It requires an active CCP. training. Build the foundation, and connect your experience with other frameworks to CMMC.
Start assessor training with a strong foundation.
Your next step: CCA training
Tell us your role and goals. We’ll point you to the right class.
The CCP Certification Path
No cybersecurity experience is required. Three organizations each handle one part of the process. Here’s who does what, what it costs, and how long you have.
With Edwards
Train
ISACA requires CCP training from an authorized provider. Finish the class and you get a certificate of completion.
5 days live or self-paced
See class datesWith ISACA
Register
Create a MyISACAYour free ISACA account. Use your name exactly as it appears on your government ID. account and pay the exam fee. You then have six months to take the exam. Need more time? A one-time extension is $75.
$575 members · $760 non-members
Register with ISACA (opens in a new tab)With PSI
Test
Book as soon as 48 hours after you pay, up to 90 days out. Test at a PSI center or from home with a live remote proctor. You’ll see if you passed right away.
3.5 hours · 170 questions
See what’s on the exam (opens in a new tab)With ISACA
Apply
Apply within one year of passing. You’ll need a Tier 3 background checkA federal background investigation, reviewed by the Department of War. ISACA requires a favorable result before it grants the CCP. and must follow ISACA’s code of ethics.
$200 application fee
See how to apply (opens in a new tab)Once you’re certified, keep your CCP active by earning continuing education credits. How to maintain your CCP (opens in a new tab)
Didn’t pass? You get four tries in 12 months. Each retake is a new exam fee, and you wait between tries:
ISACA’s free CCP and CCA Exam Candidate Guide covers every rule: IDs, rescheduling, home testing, and what happens if you get sick on exam day.
Do the first step with an Approved Training Provider rated 9.6 out of 10 by our students.
Exam facts are from ISACA’s 2026 CCP and CCA Exam Candidate Guide. Fees, timelines, and requirements are set by ISACA and can change. Always confirm the latest on isaca.org. ISACA and PSI names and logos belong to their owners and appear here only to show each organization’s role.
Edwards CCP Curriculum
Five days that take you from “what is CMMC?” to reading evidence like an assessor. Every topic uses the official source documents, taught by people who use them every day.
The 32 CFR Part 170The federal rule that created the CMMC program and sets its requirements. program rule, the DFARSDefense Federal Acquisition Regulation Supplement: the contract clauses that require defense contractors to protect information, including DFARS 252.204-7012. clauses, and how CMMC got here.
You’ll be able to explain exactly why a contract requires CMMC and what it asks for.
How to identify, mark, handle, and store FCIFederal Contract Information: contract details not meant for the public, like pricing or schedules. and CUIControlled Unclassified Information: sensitive government information, like drawings or specs, that the law requires you to protect. under National Archives rules and NIST SP 800-171.
You’ll be able to spot sensitive information and say how it must be protected.
Drawing the Level 1 and Level 2 boundary, and sorting every system into the official asset categoriesLevel 2 uses five: CUI Assets, Security Protection Assets, Contractor Risk Managed Assets, Specialized Assets, and Out-of-Scope Assets..
You’ll be able to decide what gets assessed, and what doesn’t.
Every NIST SP 800-171 requirement across all 14 families, and the evidence that proves each one works.
You’ll be able to tell strong evidence from weak evidence.
How official assessments run under the CAPCMMC Assessment Process: the official playbook assessors follow, from planning through results and POA&M close-out., from planning through the final report.
You’ll be able to serve on an assessment team or prepare a company for one.
Who does what in the CMMC ecosystem, and the Code of Professional ConductThe ethics rules every CMMC professional agrees to follow, including how to avoid conflicts of interest. every credentialed professional follows.
You’ll be able to avoid conflicts of interest that could cost you your credential.
CCP Exam Breakdown
The CCP exam has 170 questions split across six domainsOn the exam, a domain is simply a topic area. Each one is worth a set share of the questions. (Not the same as the 14 practice families.). They aren’t weighted equally, so knowing where the points are changes how you study. Every question has four choices and no penalty for guessing, so answer them all.
35%
Biggest share of the exam
How CMMC is built, and how to judge whether a practice is truly in place. Expect questions on assessment criteria, methods, and whether evidence is good enough.
Study tip: Practice reading evidence and deciding if it actually proves the requirement.
25%
Second biggest share
How an official assessment runs under the CAPCMMC Assessment Process: the official playbook assessors follow, from planning through results and POA&M close-out., and what a CCP does in each phase, from planning through the final report and POA&MPlan of Action and Milestones: a written plan for fixing remaining gaps, with owners and due dates. review.
Study tip: Learn the four phases in order and the CCP’s job in each.
15%
Where CMMC rules come from, who has authority over FCI and CUI, and the official documents behind the program.
15%
How scoping works in an assessment, and how to decide which systems and assets are in or out.
5%
The roles of The Cyber AB, ISACA, C3PAOs, assessors, RPOs, and the companies being assessed.
5%
Ethics, conflicts of interest, and the conduct expected of every CMMC professional.
Domain weights from ISACA’s official CCP Exam Content Outline (opens in a new tab). Also helpful: the Level 2 Assessment Guide (PDF, opens in a new tab) and the CCP and CCA Exam Candidate Guide (PDF, opens in a new tab).
Our boot camp spends its time where the points are, and includes practice questions so you can test yourself before exam day.
After CCP Training
A CCP is a working credential, good for three years. Here’s what it lets you do, and where it can take you next.
Give advice, consulting, and recommendations to companies getting ready for CMMC.
Take part in official Level 2 assessments, with a CCACMMC Certified Assessor: the certified professional who oversees the assessment and makes all final decisions. overseeing the work.
Guide your own company’s preparation with the same knowledge assessors use.
CCP is the required first step toward becoming a CMMC Certified Assessor.
CCP
CMMC Certified Professional
CCA
CMMC Certified Assessor
CCPAdvise companies and take part in Level 2 assessments under a CCA.
CCAConduct official Level 2 certification assessments for a C3PAO.
CCPAuthorized training, a passing exam score, and a Tier 3 background check. No experience required.
CCAAn active CCP, 3 years of cybersecurity experience, 1 year of assessment or audit experience, a DoD 8140 qualification, and a Tier 3.
CCP5 days live online · $3,295
CCA5 days live online · $3,545
Roles from the CMMC program rule (32 CFR 170.13 (opens in a new tab) and 170.11 (opens in a new tab)). See ISACA’s CCA requirements (opens in a new tab) for the full list.
Student Experience
Real feedback from professionals who took our CCP and CCA courses and now use what they learned on the job.
Already enrolled? Log in to the training portal (opens in a new tab)
CCP Training Overview
Student Feedback
Overall, the sharing of thoughts and ideas on how to apply and properly interpret the CMMC Practices and Objectives was the most valuable.
Outstandingly informative course. By far the most notes I’ve ever taken based on the sheer amount of information provided.
This was a good course and starting point. I also liked the connection to the original 110 practices and the differences among policy, procedure, and management.
The first part that made this so amazing was the different experiences and insight that each of the three instructors provided. I haven’t been in a class quite like this.
The process was done really well. I have a much better perspective on what I need to put together and how the policies, processes, and plans should look.
The perspectives of the different instructors were valuable, especially those who had already been through the DIBCACThe DoD team that assesses defense contractors’ cybersecurity. Its full name is the Defense Industrial Base Cybersecurity Assessment Center. process.
Over the five days I learned a tremendous amount about CMMC. The course was organized in a way that made the material manageable to understand and apply.
Your review could be next.
Pick a live class, or learn at your own pace with Guided CCP. Questions? Our training team answers fast.
CCP Training
CCP is the first step for everyone in CMMC. Join a live five-day class or learn at your own pace with Guided CCP.