CMMC CCA

Exam cost

$350 USD (historical estimate)

Questions · time · passing score

150 multi-choice questions, 4 hours time limit, passing score 500+, not an open book exam.

Prerequisites

To achieve the CMMC CCA certification, candidates must meet several stringent requirements 2: 1. Active CMMC Certified Professional (CCP) Certification: Candidates must first hold an active CCP certification. 2. DoD Tier 3 Determination: Obtain or possess a Tier 3 determination from the DoD. 3. CAICO Good Standing: Apply and remain in good standing with the CMMC Accreditation Body (CAICO), which includes signing compliance agreements and paying initial application and annual renewal fees. 4. Approved Training: Complete a CMMC Certified Assessor class/course offered by an Approved Training Provider (ATP). 5. Pass CCA Exam: Successfully pass the CMMC Certification Assessor examination. 6. Cybersecurity Experience: Possess at least three (3) years of cybersecurity experience. 7. Assessment/Audit Experience: Have one (1) year of assessment or audit experience. 8. Baseline Certification: Hold at least one baseline certification aligned to the Intermediate and/or Advanced Proficiency Level for the Career Pathway Certified Assessor 612 from the DoD Manual 8140.3 Cyberspace Workforce Qualification & Management Program. Qualifying certifications include, but are not limited to, CompTIA Security+, CASP+, CySA+, PenTest+, Cloud+, (ISC)2 CGRC/CAP, CISSP, CISSP-ISSEP, ISACA CISA, CISM, GIAC GCSA, GSEC, GSLC, GSNA, EC-Council CCISO, Federal IT Security Institutes FITSP-A, and Mile2 CISSO.

Estimated salary premium

15–15% (historical estimate)

Renewal requirements

1-year cycle · CPE/CEU requirement not verified

Difficulty

Not rated

Domains covered

• ** Apply CMMC Level 2 practices
• objectives
• and methodology during formal assessments.
• Evaluate documentation
• artifacts
• and evidence for completeness and accuracy.
• Perform scoping
• interviews
• and validation activities within CUI environments.
• Conduct CMMC Level 2 assessments for organizations seeking certification.
• Validate expertise in NIST SP 800-171 controls and CMMC framework.
• Understand and apply CMMC 2.0 requirements and technical background.

Where this credential fits

MyCyberPath career mappings are planning guidance, not universal employer requirements.

This credential is not currently mapped to a metro line.

Recent catalog changes

No recent changes are recorded for this credential.

Sources and verification

No reviewed source links are attached. Confirm current requirements with the issuer.