CMMC CCP study guide
CMMC CCP · Work through your exam, one topic at a time.
The Certified CMMC Professional (CCP) is an entry- to mid-level credential in the Cybersecurity Maturity Model Certification (CMMC) ecosystem, the accreditation and workforce framework administered by the Cyber AB, the accreditation body for CMMC. The Cyber AB describes itself as "building trust and confidence in the CMMC Ecosystem" and organizes that ecosystem around defined professions - "Assessors, Practitioners, Instructors, and more" - with the CCP positioned as the foundational professional tier that precedes the assessor-track credentials. The CMMC CCP study guide has 5 sections and about 1,774 words.
01CMMC Ecosystem, Roles, and Governance
The CMMC program is a Department of Defense program. Policy, requirements, and the contract clause (DFARS 252.204-7021) come from DoD, and the program is codified in 32 CFR Part 170, with the CMMC Program Management Office sitting under OUSD(Acquisition & Sustainment).
337 words, about 2 min02CMMC Model, Levels, and Practice Requirements
CMMC 2.0 has three levels and no maturity processes - the 1.0-era "capability maturity levels" and process maturity scoring are gone. Each level is a set of practices (requirements) that must be implemented.
345 words, about 2 min03Scoping, Asset Categorization, and Boundary Definition
Scoping answers one question: which assets, networks, and people does the assessment cover? The scope must be documented in the System Security Plan (SSP), an asset inventory, and a network/data-flow diagram.
367 words, about 2 min04CMMC Assessment Process (CAP) Fundamentals
The CMMC Assessment Process, published by The Cyber AB, defines how a certification assessment runs. Know its three broad phases: 1.
341 words, about 2 min05Professional Conduct, Ethics, and Assessment Documentation
The Cyber AB's Code of Professional Conduct binds every credentialed individual. Core obligations: integrity and objectivity, competence within your scope, confidentiality, compliance with law and contract, accurate representation of credentials, and avoidance - including the appearance - of conflicts of interest.
384 words, about 2 min