CMMC CCP case studies
CMMC CCP · Put your knowledge to work in context.
The Certified CMMC Professional (CCP) is an entry- to mid-level credential in the Cybersecurity Maturity Model Certification (CMMC) ecosystem, the accreditation and workforce framework administered by the Cyber AB, the accreditation body for CMMC. The Cyber AB describes itself as "building trust and confidence in the CMMC Ecosystem" and organizes that ecosystem around defined professions - "Assessors, Practitioners, Instructors, and more" - with the CCP positioned as the foundational professional tier that precedes the assessor-track credentials. The CMMC CCP case studies are 5 cases and about 3,720 words.
1The Mismatched Certificate
Meridian Prime (1,100 employees) must flow a CMMC Level 2 requirement down to Rivet Tool & Die, a 60-person subcontractor that will receive CUI drawings on a new Army program. Rivet's president sends a two-page PDF titled 'CMMC Level 2 Certification,' issued by SecurePath Consulting.
602 words, about 3 min2Level 1 Plus Encryption
Calder Precision is a 45-person job shop. Its DoD work today involves FCI only - purchase orders, delivery schedules, and quality records - so it built its posture around the 17 Level 1 practices and submitted an annual self-assessment with the owner's affirmation.
819 words, about 4 min3The Enclave-Only Boundary
Harbor Defense Systems asks you to review its proposed Level 2 assessment boundary before a scheduled C3PAO assessment. Facts: 300 endpoints on corporate IT; a 40-endpoint engineering enclave where CUI drawings are stored; a manufacturing execution system (MES) server in the plant that receives work orders from corporate ERP and is also used by engineers to view CUI drawings roughly twice a month; a FedRAMP Moderate SaaS ERP holding no CUI; a SIEM and vulnerability scanner monitoring both corporate and enclave assets; a badge/access-control server administered by facilities; and one leased engineering laptop engineers take to customer sites.
799 words, about 4 min4FS-OLD on Day Two
You are the lead assessor on a Level 2 assessment of a 220-employee manufacturer. During pre-assessment scope validation, the client's SSP lists 132 in-scope assets.
838 words, about 4 min5Three Requests in One Afternoon
You are a C3PAO assessor finishing a Level 2 assessment of a 400-employee electronics firm. Three things happen the same afternoon.
662 words, about 3 min