Certified CMMC Assessor (CCA)


5 Days


Delivery Methods
Virtual Instructor Led
Private Group

Course Overview

The Cybersecurity Maturity Model Certification (CMMC) program provides a standard model and process for conducting a conformity assessment of Department of Defense (DoD) suppliers and service providers. Organizations wanting to provide products and services to the DoD will be required to demonstrate their cybersecurity competency and compliance under the CMMC program.

A Certified CMMC Assessor (CCA) applies a rigorous Assessment Process to ensure the relevant security controls have been effectively implemented and that there is evidence that these controls can be sustained.

This course covers identifying the scope of an Assessment, assessing the CMMC Level 2 practices, and using an established process and workflow to enable efficiencies during an Assessment.

Course Objectives

  • Protect CUI with the CMMC program.
  • Establish the key elements of your responsibilities as a professional CMMC Assessor.
  • Work through an Assessment.
  • Validate the context and scope of a Level 2 CMMC Assessment.
  • Assess the practices in the Access Control (AC) domain.
  • Assess the practices in the Awareness and Training (AT) domain.
  • Assess the practices in the Audit and Accountability (AU) domain.
  • Assess the practices in the Security Assessment (CA) domain.
  • Assess the practices in the Configuration Management (CM) domain.
  • Assess the practices in the Identification and Authentication (IA) domain.
  • Assess the practices in the Incident Response (IR) domain.
  • Assess the practices in the Maintenance (MA) domain.
  • Assess the practices in the Media Protection (MP) domain.
  • Assess the practices in the Personnel Security (PS) domain.
  • Assess the practices in the Physical Protection (PE) domain.
  • Assess the practices in the Risk Assessment (RA) domain.
  • Assess the practices in the System and Communications Protection (SC) domain.
  • Assess the practices in the System and Information Integrity (SI) domain.

Who Should Attend?

This course is designed for Certified CMMC Professionals (CCP) who are interested in becoming Certified CMMC Assessors (CCA), as well as Certified CMMC Instructors (CCI) who want to teach this CCA course in the future. This course is also beneficial to employees of Defense Industrial Base (DIB) Organizations Seeking Certification (OSCs) because an understanding of how CCPs and CCAs think during an Assessment will ensure better Assessment readiness.

United Training is committed to working as a partner with our clients. Choose United Training and take advantage of the following benefits.

  • Robust Public Enrollment Schedule. Enjoy access to hundreds of Guaranteed to Run dates across a diverse catalog of course titles.
  • Private Group Training. Let our world-class instructors come to you to deliver training at your place of business or we can present to your team online using our Virtual Instructor-Led Training platform.
  • Custom Training Solutions. Our subject matter experts can customize the class to specifically address the unique goals of your team.
  • Free Re-Takes. Most completed United Training courses carry our unbeatable Learning Guarantee. This guarantee allows students to repeat most United Training courses, if they are the same version, FREE OF CHARGE, within six months of completion of the courses. Exceptions: Cisco, Citrix, VMware, Red Hat, and courses provided by affiliated 3rd party training providers.

Learning Credits: Learning Credits can be purchased well in advance of your training date to avoid having to commit to specific courses or dates. Learning Credits allow you to secure your training budget for an entire year while eliminating the administrative headache of paying for individual classes. They can also be redeemed for a full year from the date of purchase. If you have previously purchased a Learning Credit agreement with United Training, you may use a portion of your agreement to pay for this class.

Training Coupons: Previously purchased Training Coupons can be redeemed for eligible courses. If you have previously purchased a Technical or Application Training Coupon pool with United Training, you may use your coupons to pay for this class.

Corporate Tech Pass: Our Corporate Tech Pass includes unlimited attendance for a single person, in the following Virtual Instructor Led course types: Microsoft Office, Microsoft Technical, CompTIA, Project Management, SharePoint, ITIL, Certified Ethical Hacker, Certified Hacking Forensics Investigator, Java, Professional Development Courses and more. The full list of eligible course titles can be found at https://unitedtraining.com/eligible.

Training Passport: A Training Passport allows you to secure up to 20 days of training to use at any time over 12 months. Your training days can be used by one member of your organization or split up among multiple employees. This course can be taken as part of your previously purchased Training Passport.

If you have questions about Learning Credits, Technical or Application Coupons, our Corporate Tech Pass, or our Training Passport, please contact your Account Manager.

Course Prerequisites

There are no prerequisites for this course.


Lesson 1: Protecting CUI with the CMMC Program

  • Topic A: Protect Controlled Unclassified Information
  • Topic B: Utilize the CMMC Source Documents

Lesson 2: Being an Assessor

  • Topic A: Identify Assessment Roles and Responsibilities
  • Topic B: Establish an Assessor Mindset
  • Topic C: Determine the OSC's Cybersecurity Environment

Lesson 3: Working Through an Assessment

  • Topic A: Identify Assessment Flow and Milestone Events
  • Topic B: Prepare to Work with the OSC
  • Topic C: Formalize the Plan
  • Topic D: Assess the Evidence
  • Topic E: Handle Non-Conformity Issues
  • Topic F: Finalize the Assessment

Lesson 4: Validating the Scope of a CMMC Assessment

  • Topic A: Define Scope Fundamentals
  • Topic B: Categorize the Assets
  • Topic C: Determine the OSC Context
  • Topic D: Define ESPs
  • Topic E: Validate the Assessment Scope

Lesson 5: Assessing the AC Practices

  • Topic A: Evaluate the AC Practices
  • Topic B: Identify AC Connections and Considerations

Lesson 6: Assessing the AT Practices

  • Topic A: Evaluate the AT Practices
  • Topic B: Identify AT Connections and Considerations

Lesson 7: Assessing the AU Practices

  • Topic A: Evaluate the AU Practices
  • Topic B: Identify AU Connections and Considerations

Lesson 8: Assessing the CA Practices

  • Topic A: Evaluate the CA Practices
  • Topic B: Identify CA Connections and Considerations

Lesson 9: Assessing the CM Practices

  • Topic A: Evaluate the CM Practices
  • Topic B: Identify CM Connections and Considerations

Lesson 10: Assessing the IA Practices

  • Topic A: Evaluate the IA Practices
  • Topic B: Identify IA Connections and Considerations

Lesson 11: Assessing the IR Practices

  • Topic A: Evaluate the IR Practices
  • Topic B: Identify IR Connections and Considerations

Lesson 12: Assessing the MA Practices

  • Topic A: Evaluate the MA Practices
  • Topic B: Identify MA Connections and Considerations

Lesson 13: Assessing the MP Practices

  • Topic A: Evaluate the MP Practices
  • Topic B: Identify MP Connections and Considerations

Lesson 14: Assessing the PE Practices

  • Topic A: Evaluate the PE Practices
  • Topic B: Identify PE Connections and Considerations

Lesson 15: Assessing the PS Practices

  • Topic A: Evaluate the PS Practices
  • Topic B: Identify PS Connections and Considerations

Lesson 16: Assessing the RA Practices

  • Topic A: Evaluate the RA Practices
  • Topic B: Identify RA Connections and Considerations

Lesson 17: Assessing the SC Practices

  • Topic A: Evaluate the SC Practices
  • Topic B: Identify SC Connections and Considerations

Lesson 18: Assessing the SI Practices

  • Topic A: Evaluate the SI Practices
  • Topic B: Identify SI Connections and Considerations

There are no open enrollment courses currently scheduled.
Inquire about scheduling this course when it’s best for your team. Learn More about Private Group Training


Do You Have Additional Questions? Please Contact Us Below.

contact us contact us 
Contact Us about Starting Your Business Training Strategy with United Training