Popular: CMMC CCP Boot Camp Bookstore Contract Vehicles
8865 Stanford Blvd., Suite 202, Columbia, MD 21045
CMMC Resources
We help defense contractors get ready for CMMCCybersecurity Maturity Model Certification: the DoD’s required cybersecurity standard for defense contractors and subcontractors. and help professionals get certified. Pick what you need:
50+ years of combined cybersecurity experience · NIST SP 800-171 assessments since 2015
Latest CMMC update
The Department of War launched a 60-day review. Most contractors should keep preparing as usual.
Cyber AB Authorized Roles
Edwards holds four official roles from The Cyber ABThe official accreditation body for the CMMC program. It authorizes the companies and people who prepare, train, and assess.. Here’s what each one means for you.
Certified Third-Party Assessment Organization
We can certify you. We perform official CMMC Level 2 assessments.
Registered Practitioner Organization
We can get you ready. Scoping, gap assessments, and readiness plans.
Good to know: the same C3PAO can’t both prepare you and assess you. If we help you get ready, another C3PAO performs your official assessment, and the reverse.
Verify our credentialsCMMC Quick Facts
The basics every defense contractor should know, in about 30 seconds.
What CMMC protects
FCIFederal Contract Information: non-public information the government gives you or you create under a contract. is protected at Level 1. CUIControlled Unclassified Information: sensitive government information that isn’t classified but still must be protected. is protected at Level 2 and Level 3.
Latest status
Phase 2 is under a 60-day DoD review. Phase 1 requirements still apply. What this means for you
CMMC Training
Official, Cyber AB approved courses for people building a CMMC career, plus private classes for whole teams.
CMMC Training Calendar
Live online, Monday to Friday, 9 AM to 5 PM Eastern. Pick a week and enroll in minutes.
CMMC Certified Professional · $3,295
CMMC Certified Assessor · $3,545 · CCP requiredYou’ll need an active CCP before you can earn the CCA certification.
Q1 2027 dates are coming soon. Want to hear first? Email us to get on the list.
Can’t take a week off? Guided CCP: start anytime, learn at your own pace About 20 hours · 6 months of access · $1,899 View Guided CCP (opens in a new tab)Featured event January 17–24, 2027
A week of CMMC learning and networking aboard Celebrity Beyond, including CCP training at sea taught by Edwards.
CMMC Training Help Desk
Quick answers to what people ask us most. Tap a question to open it.
Start with CCPCMMC Certified Professional: the foundational CMMC certification and the required first step toward CCA.. It’s the first certification for everyone in CMMC. Once you have it, you can move on to CCACMMC Certified Assessor: the certification required to perform official CMMC Level 2 assessments. if you want to perform official assessments.
All live classes run Monday to Friday, 9 AM to 5 PM Eastern, online. Q1 2027 dates are coming soon.
Exam and certification fees are paid separately to ISACA.
ISACA CCP exam info (opens in a new tab) Open the training catalog (opens in a new tab)
Yes. We run private classes for companies, assessment teams, and partner groups, live online or tailored to your schedule. Tell us how many people and what they’re working toward.
Our CCP Field Guide and Exam Prep Manual is official Cyber AB approved study material, available in print and digital. It’s included with our CCP courses.
No. Phase 2 is under review, not cancelled. Today’s CCP and CCA exams and curriculum stay valid through at least Q1 2027, so there’s no reason to wait.
Still have a question? Reach a real person.
Understanding CMMC
CMMC (Cybersecurity Maturity Model Certification) is the Department of Defense’s program for making sure companies that work on defense contracts protect sensitive government information.
Who does what in CMMC
30-second check
Check anything that’s true for your company.
This is a quick guide, not an official determination. Your contract decides your level.
CMMC Readiness & Assessments
Whether you’re just starting or ready for your official assessment, we’ll help you figure out what applies and what to do next.
Not sure where you stand?
Readiness consulting from a registered RPORegistered Practitioner Organization: a consulting firm verified by The Cyber AB to help companies prepare for CMMC.
Ready to get certified?
Level 2 certification from an authorized C3PAOCertified Third-Party Assessment Organization: the only type of company allowed to certify CMMC Level 2.
50+years of combined cybersecurity experience
2015Our first NIST SP 800-171 assessments
Not sure which you need?
Talk to a CMMC expertThe CMMC Framework
Your level depends on the information you handle. Each step up adds more requirements and a stricter assessment.
Level 1
For companies that handle FCIFederal Contract Information: non-public information the government shares with you, or you create, under a contract.
Level 2 Most common for CUI
For companies that handle CUIControlled Unclassified Information: sensitive government information that isn’t classified but must be protected.
Level 3
For the most sensitive programs
Not sure which level you need? Your contract decides, and we can help you read it.
CMMC Compliance Case Study
Harkins Builders needed a more practical way to prepare for CMMC. Edwards helped the team understand its environment and turn the remaining work into a plan it could actually use.
A document-heavy process made it hard to see what mattered or where to start.
Clear scoping gave Harkins a solid foundation for its cybersecurity work and assessment prep.
Published in the ABC 2023 Tech Report
CMMC Readiness
A CMMC gap assessment compares how your company protects information today against every requirement for your CMMC level. It shows exactly what’s missing, so you can fix it before your official assessment, not during it.
Our approach is simple: respect your budget and timeline, keep your leaders informed, and stay product-neutral. We never push tools or software.
We talk with your team to understand how your business really works, then aim our effort where it matters.
We map how FCI and CUIThe two kinds of sensitive government information CMMC protects: Federal Contract Information and Controlled Unclassified Information. move through your company and to your partners.
We decide whether your scope is the whole company, a department, or an enclaveA walled-off part of your network that holds CUI, which can shrink what needs to meet CMMC., and sort every asset correctly.
We review your systems and processes against each requirement and confirm what’s already working.
You get a clear plan with priorities, business risk, and the investments each fix will take.
We help your team close every POA&MPlan of Action and Milestones: your written list of open gaps, who owns each one, and when it will be fixed. item, from policies and an SSPSystem Security Plan: the document that describes your environment and how you meet each requirement. Assessors read it first. to technical fixes.
We work alongside your team.
Edwards doesn’t compete with your consultant, implementer, or MSP. We bring the CMMC expertise; they keep doing what they do best.
CMMC Resources
Whether you need your company certified or want to get certified yourself, one conversation will point you in the right direction.