CMMC CCI key terms

The network of organizations and roles that support CMMC adoption, including the accrediting body, assessors, certified professionals, training providers, and the defense contractors subject to the model.

The independent organization authorized by the Department of Defense to accredit assessors, certify professionals, and oversee the integrity of the CMMC assessment ecosystem.

A credentialed individual who has passed the foundational CMMC exam and may support assessment activities under the supervision of a certified assessor, often serving as an instructor or advisor.

A credentialed professional authorized to lead or conduct CMMC assessments, verifying that an organization meets the requirements of a given level and reporting results to the authorizing body.

The position of delivering CMMC training content accurately, managing the learning environment, and modeling professional conduct so candidates are prepared for assessment and credentialing responsibilities.

An organization approved by the accrediting body to deliver CMMC-related consulting or training services, whose personnel must follow program integrity and ethics requirements.

An individual with deep, verified knowledge of a CMMC domain who develops or reviews curriculum and assessment content to ensure technical accuracy and currency.

The Department of Defense framework that organizes cybersecurity practices into maturity levels and domains, used to verify that defense contractors protect controlled unclassified information across the supply chain.

A cumulative tier in the CMMC model, where each successive level builds on the practices of lower levels and adds stricter process and protection requirements.

A grouping of related cybersecurity practices within the model, such as access control or incident response, that organizes requirements into logical assessment areas.

A specific cybersecurity requirement stated in the CMMC model that an organization must implement and that assessors evaluate for existence and effectiveness.

A discrete, verifiable statement describing what an assessor must confirm to determine whether a practice is met, often expressed as a determination statement with supporting evidence expectations.

The defined boundary of assets, systems, people, and processes subject to a CMMC assessment, established before evidence collection begins.

Documentation, records, interviews, or observations collected during an assessment to demonstrate whether an assessment objective is satisfied or not satisfied.

Government-created or owned unclassified information that requires safeguarding under law, regulation, or policy, and which CMMC exists to protect across the defense industrial base.

A document listing known deficiencies, the remediation actions planned, responsible parties, and target completion dates, used to track progress toward meeting practices.

A formal conclusion recorded by assessors about whether a practice or objective is met, not met, or otherwise requires management attention.

The body of principles explaining how adults learn, emphasizing relevance, self-direction, experience, problem-centered instruction, and immediate application to real work.

A specific, measurable statement describing what a learner should be able to do after instruction, used to align content, activities, and assessment.

Low-stakes checks for understanding during instruction, such as questions or exercises, used to adjust teaching in real time rather than to assign a final grade.

An evaluation at the end of instruction that measures whether learning objectives were achieved, typically used for certification or grading decisions.

The mental effort required to process information during learning; instructors manage it by chunking content, sequencing complexity, and removing extraneous material.

Temporary instructional support, such as worked examples or guided prompts, that is gradually removed as learners gain competence and independence.

A hierarchy of cognitive skills from remembering through creating, used to write learning objectives and align assessment questions to the intended level of thinking.

The design principle that learning objectives, instructional activities, and assessments must all target the same knowledge and skills so that evaluation reflects instruction.

The binding set of behavioral standards for certified professionals and instructors, covering competence, honesty, confidentiality, and avoidance of conflicts of interest.

A situation where personal, financial, or organizational interests could improperly influence professional judgment, requiring disclosure and often recusal from the affected activity.

The state of being free from relationships or pressures that could compromise objectivity when assessing, teaching, or advising on CMMC matters.

The obligation to protect sensitive information learned during instruction or assessment, disclosing it only to authorized parties and only as permitted.

The practices that protect exam content and results from unauthorized access, disclosure, or manipulation, preserving the fairness of certification decisions.

Any attempt to gain unfair advantage on an exam, including impersonation, unauthorized materials, answer sharing, or tampering with test delivery systems.

The overall assurance that certification and training programs are fair, secure, accurate, and free from misconduct, upheld through policies, monitoring, and enforcement.

Required ongoing professional development that keeps certified individuals current with model changes, emerging threats, and evolving assessment methods.

The extent to which exam or course content faithfully represents the knowledge and skills required for competent performance in the role being certified.

The principle that assessments and instruction are free from bias, accessible to qualified candidates, and applied consistently so results reflect competence rather than irrelevant factors.