CMMC Training
The Cybersecurity Maturity Model Certification (CMMC) is the US Department of War's framework for protecting Controlled Unclassified Information (CUI) across the Defense Industrial Base. ATA delivers authorized CMMC training — Certified CMMC Professional (CCP) and Certified CMMC Assessor (CCA) — taught by ISACA CMMC Credentialed Instructors (CCI).
ISACA is now the CMMC CAICO
ISACA is now the official CMMC Assessor & Instructor Certification Organization (CAICO) for the DoW's CMMC Program. As the credentialing authority, ISACA oversees authorized CMMC training, facilitates the examinations, and administers CMMC certifications.
Two certifications, one clear pathway
Start with the foundational CCP, then advance to the CCA assessor credential.
Certified CMMC Professional (CCP)
The foundational certification in the CMMC ecosystem — for professionals and consultants entering the CMMC space. Builds the assessment and examination knowledge that underpins every CMMC role.
View course →Certified CMMC Assessor (CCA)
The next-level certification, enabling certified professionals to function as assessors. A CCA can conduct Level 2 CMMC Assessments for defense contractors and serve as part of a Certified Third-Party Assessment Organization (C3PAO).
View course →Taught by CCI-credentialed instructors
Every ATA CMMC instructor is an ISACA CMMC Credentialed Instructor (CCI) — authorized to deliver official CMMC training that prepares candidates for the CCP and CCA exams.
Government & Military training → Governance, Risk & Compliance →
Why CMMC matters for the Defense Industrial Base
Protect CUI
CMMC verifies that Defense Industrial Base contractors safeguard Controlled Unclassified Information to DoW standards.
Meet today's requirements
Phase 1 self-assessments remain in effect, and the NIST SP 800-171 safeguards behind CMMC already apply to contractors that handle CUI.
Be ready for what comes next
Third-party (C3PAO) assessment under Phase 2 is paused while the program is reviewed. Training your team now positions you to act quickly on whatever the review decides.
Design training around your team, not the other way around.
Talk to a training advisor about private cohorts, funding paths and program management.