English CMMC Certified Professional (CCP)
The CMMC Certified Professional (CCP) credential demonstrates foundational knowledge of the Cybersecurity Maturity Model Certification (CMMC) framework and the ability to support organizations in preparing for and navigating CMMC assessments. A CCP understands CMMC requirements, cybersecurity best practices, assessment processes, and compliance expectations for organizations working within the U.S. Department of Defense (DoD) supply chain. This certification validates expertise in cybersecurity governance, risk management, compliance, and the implementation of security controls aligned with the CMMC model.
- 4.8/5.0
- 600 Enrolled
Course Overview
- The Cybersecurity Maturity Model Certification (CMMC) is a
unified standard for implementing cybersecurity across the Defense Industrial
Base (DIB). As government contractors face increasingly stringent requirements
to protect Controlled Unclassified Information (CUI), the demand for qualified
professionals who can navigate and implement the CMMC framework has never been
higher. This comprehensive course is meticulously designed to equip aspiring
and current cybersecurity professionals with the in-depth knowledge and
practical skills required to become a CMMC Certified Professional (CCP),
empowering them to guide organizations through the complexities of CMMC
compliance.
This program delves into the foundational principles of CMMC v2.0, exploring its architecture, domains, practices, and processes across all maturity levels. Participants will gain a thorough understanding of CUI and Federal Contract Information (FCI), the various CMMC assessment methodologies, and the roles and responsibilities within the CMMC ecosystem. We emphasize a practical, real-world approach, providing learners with the tools to interpret CMMC requirements, identify gaps in an organization's cybersecurity posture, and develop effective remediation strategies. - Beyond theoretical knowledge, this course prepares you for the official CMMC Certified Professional (CCP) examination, a crucial step towards validating your expertise. By achieving CCP certification, you will not only enhance your career prospects but also position yourself as a vital asset to any organization seeking to comply with Department of Defense (DoD) cybersecurity mandates. Join us to become a trusted advisor, safeguarding critical national security information and contributing to a more resilient DIB supply chain.
- Whether you are an IT professional, a compliance officer, a government contractor, or a cybersecurity consultant, this course offers an unparalleled opportunity to master a critical and evolving area of cybersecurity and compliance. Elevate your professional standing and play a pivotal role in securing the nation's defense infrastructure.
Course Outlines
Module 1: Introduction to CMMC and the Defense Industrial Base (DIB)
- Understanding the Defense Industrial Base (DIB) and its significance
- The evolution of cybersecurity compliance: From NIST SP 800-171 to CMMC
- Purpose, goals, and foundational principles of CMMC v2.0
- Key definitions: Controlled Unclassified Information (CUI) and Federal Contract Information (FCI)
- Overview of the CMMC ecosystem: DoD, Cyber AB (CAICO), CMMC Third-Party Assessment Organizations (C3PAOs), Organizations Seeking Certification (OSCs)
- Legal and contractual basis for CMMC: DFARS clauses
Module 2: CMMC v2.0 Architecture and Scoping
- Deep dive into the CMMC Model v2.0 structure: Domains, Practices, and Processes
- Understanding CMMC Levels: Level 1 (Foundational), Level 2 (Advanced), Level 3 (Expert)
- Mapping CMMC practices to NIST SP 800-171 and other relevant standards
- Introduction to CMMC Scoping Guidance: Identifying CUI boundaries and assets
- Understanding assessment objectives and evidence requirements for practices
- The
role of System Security Plans (SSPs) and Plans of Action & Milestones
(POAMs) in CMMC
Module 3: CMMC Level 1: Foundational Safeguards
- Review of the 17 practices required for CMMC Level 1 certification
- Understanding the intent and implementation of Access Control (AC) practices for FCI
- Identification and Authentication (IA) requirements for basic user management
- Media Protection (MP) for safeguarding digital and physical media
- Physical Protection (PE) strategies for securing facilities and systems
- System and Communications Protection (SC) and System and Information Integrity (SI) basics
Module 4: CMMC Level 2: Advanced Practices – Domains 1-6
- In-depth analysis of Level 2 practices mapped to NIST SP 800-171
- Configuration Management (CM): Baselines, changes, and security configurations
- Incident Response (IR): Planning, detection, analysis, containment, eradication, and recovery
- Maintenance (MA): Secure maintenance of systems and components
- Risk Management (RM): Identifying, assessing, and mitigating risksLesson Plan
- Security Assessment (CA): Continuous monitoring and periodic assessments
- Situational Awareness (SA): Threat intelligence and proactive defense
Module 5: CMMC Level 2: Advanced Practices – Domains 7-14
- Audit and Accountability (AU): Logging, auditing, and accountability controls
- Asset Management (AM): Inventory and control of organizational assets
- Personnel Security (PS): Screening, training, and managing personnel access
- Recovery (RE): Backup and recovery strategies for information systems
- System and Communications Protection (SC) – Advanced controls for CUI
- System and Information Integrity (SI) – Advanced malware protection and vulnerability management
- Planning (PL): Developing and maintaining security plans and policies
Module 6: CMMC Assessment Process and Methodology
- Understanding the CMMC Assessment Process: Pre-Assessment, Assessment, Post-Assessment
- Roles and responsibilities of the CMMC Certified Professional during an assessment
- Evidence gathering techniques: Interviews, examinations, and testing
- Developing a CMMC Assessment Plan and Scoping Matrix
- Remediation actions, Plan of Action and Milestones (POAMs), and re-assessment procedures
- Ethical considerations and professional conduct for CMMC professionals
Module 7: CCP Exam Preparation and Professional Practice
- Comprehensive review of the CMMC Certified Professional (CCP) exam blueprint
- Effective study strategies, practice questions, and exam-taking techniques
- The role of a CCP in supporting an Organization Seeking Certification (OSC)
- Communicating CMMC requirements and findings to diverse stakeholders
- Continuous improvement, CMMC updates, and maintaining professional competence
- Networking and career opportunities for CMMC Certified Professionals
Course Objectives
- Explain the purpose, structure, and evolution of the CMMC framework v2.0 and its impact on the DIB.
- Identify and interpret CMMC domains, practices, and processes across all maturity levels, particularly Level 1 and Level 2.
- Differentiate between Controlled Unclassified Information (CUI) and Federal Contract Information (FCI) and their respective protection requirements.
- Analyze an organization's current cybersecurity posture and documentation against CMMC Level 1 and Level 2 requirements.
- Communicate CMMC requirements, assessment methodologies, and findings effectively to diverse organizational stakeholders.
- Develop and recommend strategies to assist Organizations Seeking Certification (OSCs) in preparing for a CMMC assessment.
- Apply ethical guidelines and professional standards while performing CMMC-related advisory and support roles.
- Prepare thoroughly and effectively for the official CMMC Certified Professional (CCP) certification examination.
Course Prerequisites
- Foundational understanding of cybersecurity principles, concepts, and best practices.
- Familiarity with NIST SP 800-171, its controls, and implementation guidance.
- Basic knowledge of IT infrastructure, network security, and common cybersecurity technologies.
- Strong analytical and problem-solving skills to interpret complex regulatory documents.
- Professional communication skills to interact with various stakeholders.
Course Schedule
| Date | Days Left | Training Location | |
|---|---|---|---|
No schedules available | |||
Our Customer Reviews
4.8
(*)(*)(*)(*)(*)
Excellent
(*)(*)(*)(*)(*)
(*)(*)(*)(*)( )
( )( )( )( )( )
( )( )( )( )( )
( )( )( )( )( )
Mia Schmidt
I took CCP with iExperts online. The class was grand and the tutor made governance controls and audit evidence feel far less heavy.
(*)(*)(*)(*)(*)
Jonas Walsh
For CCP I wanted a course with real discussion. iExperts gave that and the trainer kept the class active.
(*)(*)(*)(*)(*)
Laura Turner
iExperts made CCP feel manageable. The live examples helped me see what to do when the theory meets work.
(*)(*)(*)(*)(*)
This course includes
- Duration32 h
- VendorISACA
- CategoryCyber Security
- CertificateYes
Similar Courses
Certified Data Privacy Solutions Engineer (CDPSE)
The certification focuses on the technical aspects of data privacy rather than legal or policy topics alone. It demonstrates that the holder can: Design and implement privacy controls in applications, systems, and networks. Integrate privacy requirements throughout the data lifecycle. Work with security, engineering, legal, and compliance teams. Support compliance with privacy regulations such as General Data Protection Regulation and other global privacy frameworks.
- 40 h 4.8 (700)
Certification ISACA Advanced in AI Risk (AAIR)
ISACA Advanced in AI Risk (AAIR) is an advanced certification for experienced IT risk professionals that validates the knowledge and skills required to identify, assess, govern, and manage risks associated with artificial intelligence (AI) across the enterprise. The credential is designed for professionals with an established background in risk management who want to extend their expertise to address AI-specific governance, lifecycle, and program management challenges.
- 16 h 4.8 (600)
Advanced Artificial Intelligence Applications (AAIA)
AAIA is an advanced professional certification focused on the auditing and governance of artificial intelligence systems. It is designed to equip professionals with the skills to evaluate AI technologies in terms of security, transparency, fairness, risk management, and regulatory compliance. In simple terms, AAIA prepares specialists to assess AI systems and ensure they operate safely, ethically, and without bias while meeting required standards and policies.
- 16 h 4.8 (600)
Certification Certified Cybersecurity Operations (CCOA)
The CCOA course provides comprehensive training for healthcare assistants specializing in orthopaedic care. It covers the fundamentals of musculoskeletal anatomy, common orthopaedic conditions, patient assessment, basic clinical procedures, fracture care support, and rehabilitation principles. The course also focuses on developing practical skills for assisting orthopaedic physicians and nurses in clinical and hospital settings, ensuring safe and effective patient care.
- 32 h 4.8 (700)
SCADA Security Manager
SCADA Security Manager is a professional training program designed to equip participants with the knowledge and skills required to manage and secure **SCADA environments** and **Industrial Control Systems (ICS)** against modern cyber threats. The program focuses on developing cybersecurity strategies, risk management, **Operational Technology (OT) security governance**, industrial network protection, incident response, and compliance with international standards such as **IEC 62443** and the **NIST Cybersecurity Framework (CSF)**. Participants will gain the expertise needed to lead SCADA security initiatives, enhance the resilience of critical infrastructure, and ensure the continuity of industrial operations with the highest levels of security.
- 32 h 4.5 (700)
Course Tags
You may also like
Check out most 🔥 courses in the market
Certified Information Security Manager (CISM)
The Certified Information Security Manager (CISM) course provides essential expertise in designing, managing, and governing enterprise information security programs. It equips you to align security strategies with business objectives, conduct risk assessments, and implement effective controls. You will learn to manage incident response, evaluate vulnerabilities, and ensure organizational compliance. The program also builds leadership and communication skills to promote a strong security culture. Earning CISM validates your ability to lead security initiatives that protect assets and support business success.
4.8
(2135)
Certified in the Governance of Enterprise IT (CGEIT)
The Certified in the Governance of Enterprise IT (CGEIT) course equips experienced professionals to lead and optimize enterprise IT governance. It focuses on aligning IT strategies with business objectives, maximizing value delivery, and ensuring effective risk and resource management. Participants gain a strong understanding of governance frameworks, strategic alignment, and accountability structures. The course also covers key components such as policies, processes, SLAs/OLAs, and data integrity. Graduates will be able to design, implement, and monitor robust IT governance systems that enhance organizational performance.
4.8
(1743)
Dora Lead Manager
The DORA (Digital Operational Resilience Act) Lead Manager course equips senior professionals with the skills and knowledge needed to oversee, manage, and ensure compliance with the DORA framework in financial institutions and related ICT service providers. This program covers operational resilience strategies, ICT risk management, incident handling, reporting requirements, and oversight of third-party providers, enabling participants to lead their organizations in meeting the EU’s regulatory expectations effectively.
4.9
(2000)
ISO 9001 Lead Implementer
The ISO 9001 Lead Implementer training course equips participants with the necessary knowledge and skills to support an organization in establishing, implementing, managing, and maintaining a Quality Management System (QMS) based on ISO 9001:2015. This course provides a practical methodology for the implementation process by applying best practices and aligning with international quality management standards. By the end of the course, participants will gain hands-on expertise in leading implementation projects, managing teams, and preparing organizations for certification audits.
4.8
(3000)
ISO 42001 AI lead implementer
The ISO/IEC 42001 Lead Auditor course equips professionals with the knowledge and skills to conduct and lead Artificial Intelligence Management System (AIMS) audits in compliance with ISO/IEC 42001. Participants will learn to apply internationally recognized audit principles, manage audit programs, and ensure AI governance aligns with ethical, legal, and organizational requirements. The course prepares attendees for certification as an ISO/IEC 42001 Lead Auditor, empowering them to assess AI systems for compliance, risk management, and continuous improvement.
4.9
(2000)