This is the main content of the page.

 
 

Ecosystem ProfessionsCMMC Implementation Consulting

Registered Practitioners and Registered Provider Organizations 

CMMC needs to be implemented before it can be assessed.  Accordingly, there is a demand for individuals and companies who understand CMMC, who are invested in it, and who how to prepare defense contractors for implmentation and eventual preparation for a CMMC Assessment. These professionals bring their experience as well as their CMMC Registered Practitioner (RP) training knowledge to the Organizations Seeking Certification (OSC) as part of contract engagement.

Individuals holding any level of an RP designation can provide CMMC implementation consulting services to assist in identifying gaps and providing mitigation strategies for an OSC preparing for an assessment. RPs work for Registered Practitioner Organizations (RPO) but can also be contracted as individuals.

Individuals who hold an RP designation can also pursue becoming a Certified CMMC Assessor with the following understanding:

  • Individuals holding multiple designations (RP/RPA and Assessor Certifications) cannot assess a company if they have previously assisted with an implementation for that same company.
  • Assessors may not be fully trained in CMMC implementation preparation activities and should seek to hold an RP designation to work for or act in the capacity of a implementation consultant.
RPs and RPOs are authorized to represent the organization as familiar with the basic constructs of the CMMC Standard with a Cyber AB provided logo.
 

Requirements Grid

Candidate
Registration Duration
Fee*
Renewal Terms
Citizenship
 
Registered Practitioner (RP)
Approximately 3 weeks, including background check
$600 Application, Training and Testing
1 year, must renew annually
U.S., Australia, NATO countries and South Korea citizenship is required
 
Registered Practitioner Advanced (RPA)
Approximately 3 weeks, including background check
$1,000 Application, Training and Testing
1 year, must renew annually
U.S., Australia, NATO countries and South Korea citizenship is required
 
Registered Practitioner Organization (RPO)
Approximately 3 weeks, including background check
$6,000 Application
1 year, must renew annually
See RP and RPA Citizenship Requirements
 

*All fees are inclusive of application processing and membership registration which are non-refundable (please see Refund Policy). Schedule does not include any training, testing or examination fees.

Upon successful completion of the process, all candidates will be presented with additional information to include the authorized use of digital credentials in business materials, listing in the CMMC Central Marketplace and access to the Cyber AB’s community updates.

Registered Practitioner (RP)

an individual
 

RP Enroll Here
 

The Registered Practitioner program is training individuals on the following domains to assist OSCs in preparing for a CMMC assessment

 

Modules:

1: Introduction to CMMC and the CMMC Model
2: The CMMC Accreditation Body and the CMMC Ecosystem
3: Federal Contract Information (FCI)
4: Prime and Subcontract Information Flow
5: CMMC Tools, and templates
6: Implementing the CMMC L1 Framework – In-depth practice implementation walk through – Use of CMMC Tools/templates by practice
7: CMMC Assessment Scoping – High-Level Scoping – FCI Boundary – Environmental Considerations
10: Contract/Agreement fulfillment
11: Conclusion

 

An RP must meet and complete a series of requirements to achieve designation:

  • Register with and receive authorization from the CMMC-AB
  • Be able to pass a commercial background check
  • Complete the online CMMC-AB provided training and pass the respective course exams
  • Sign and acknowledge the (1) CMMC-AB Code of Professional Conduct and (2) an RP Agreement

Registered Practitioner Advanced (RPA)

an individual

RPA Enroll Here

 

The Registered Practitioner Advanced program is training individuals on the following domains to assist OSCs preparing for a CMMC assessment:
 

Modules:

1: Controlled Unclassified Information (CUI)
2: CMMC Tools, and templates
3: CMMC Assessment Scoping – Level 2 (CUI Assets)
4: Implementing the CMMC Framework – In-depth practice implementation walk through

 

Sub-modules:

  • AC Domain
  • AT Domain
  • AU Domain
  • CM Domain
  • IA Domain
  • IR Domain
  • MA Domain
  • MP Domain
  • PE Domain
  • PS Domain
  • RA Domain
  • CA Domain
  • SC Domain
  • SI Domain
5: Understanding the CMMC Assessment Process
6: POA&M/Limited Practice Deficiency Correction
7: Contract/Agreement fulfillment
8: Conclusion

 

An RPA must meet and complete a series of requirements to achieve designation:

  • As a prerequisite, complete and successfully achieve Registered Practitioner (RP) status from the CyberAB
  • Meet additional experience requirements by having implemented, at minimum, 50+ cybersecurity framework controls that directly correlate to the 110 CMMC Level 2 practices.
  • If approved, complete RPA training and achieve a passing score on CyberAB RPA exam to earn RPA designation
  • Sign required documentation which may include an updated Code of Professional Conduct (CoPC)

 

Registered Practitioner Organization (RPO)

an organization

RPO Enroll Here

The Registered Practitioner Organization designation is designed for organizations that provide services within the defense supply chain as an advisory firm or as an MSP (Managed Service Provider).

An RPO must meet and complete a series of requirements to achieve designation:

  • Register with and receive authorization from the CMMC-AB
  • Be able to pass an organizational background check (provide UEI/DUNS number)
  • Associate, at minimum, one (1) Registered Practitioner (RP) to the respective RPO
  • Sign and acknowledge the (1) CMMC-AB Code of Professional Conduct and (2) an RPO Agreement

 

Want to become a Member?

Membership into the Cyber AB community, and visibility within the CMMC marketplace, is reserved for those organizations and individuals which successfully complete and pass their respective application and onboarding process, which includes formal review and authorization by the Cyber AB.

Please click on the appropriate enrollment button above to start the process.