Become a CMMC Certified Professional

The CCP is the foundational credential in the CMMC ecosystem. ISACA, now the credentialing authority for the CMMC program, administers it for the Department of Defense, and it validates that you’re ready to help organizations get assessment-ready or serve on a CMMC Assessment Team. It’s also the prerequisite to the CMMC Certified Assessor (CCA) and CMMC Certified Instructor (CCI).

ecfirst is one of the most credentialed partners in the CMMC ecosystem — an Approved Training Provider (ATP), Approved Partner Publisher (APP), Registered Provider Organization (RPO), and a Certified Third-Party Assessment Organization (C3PAO). Their auditors are their trainers, so the people teaching the course are also the people running real CMMC assessments in the field. We deliver this program with ecfirst because that pedigree can’t be matched by a third-party study guide.

We’re an award-winning ISACA partner, including recognition as ISACA Partner of the Year, and we’ve trained tens of thousands of professionals on ISACA credentials including CISA, CISM, and CCISO. That partnership matters here because ISACA is the new credentialing authority for the entire CMMC program, so working inside their training ecosystem keeps our content aligned with the current exam.

ISACA is actively redeveloping CCP exam content as the program evolves, and the courseware moves with it. Because we deliver through ecfirst — an Approved Training Provider — our students train on the current ISACA exam outline rather than older third-party material that hasn’t kept up. As the credential changes, the course changes with it.

The CCP is built for anyone working inside the CMMC ecosystem — IT and cybersecurity professionals at defense contractors, consultants supporting organizations seeking certification, regulatory and contract compliance staff, federal employees, and candidate CMMC Assessment Team members. If your work touches Federal Contract Information (FCI) or Controlled Unclassified Information (CUI), this is the foundational credential.

ISACA requires a college degree in a cyber or information-technical field, or two-plus years of related experience (military service counts), plus completion of a CCP class from an Approved Training Provider — which is what this course is. The DoD CUI Awareness Training is also recommended within three months of your exam date.

No. Under ISACA’s administration, the CCP exam is purchased and scheduled separately, then taken at a PSI test center or online with remote proctoring. You’ll leave class ready for it, but the exam itself runs on your own schedule within the six-month eligibility window after registration.

The CCP exam is US$575 for ISACA members and US$760 for nonmembers, plus a US$200 application processing fee paid to ISACA after you pass. Course tuition is separate. We can walk you through the full cost breakdown — and any funding options that apply — when you reach out.

Passing the exam is one piece. You’ll also need to submit an application demonstrating your experience, pay the US$200 ISACA application fee, attain a positively adjudicated Tier 3 background investigation, and adhere to ISACA’s Code of Professional Ethics and Continuing Professional Education policy. You have one year from passing to complete the application.

Yes, both. Live online is the most common delivery for this program, but on-site at your facility is available for teams. Either way, the cohort meets Tuesday through Friday with the same content and the same working-assessor instructors.

The CCP is a hard prerequisite to the CCA — there’s no path to the assessor credential that doesn’t run through this first. From here you can move into formal assessment work as part of a C3PAO team, and eventually advance to Lead CCA. We offer the CCA boot camp as well when you’re ready.

We support GI Bill (Chapters 30-35), VET TEC, VRRAP, ArmyIgnitED, Air Force COOL, Navy COOL, Marine Corps COOL, federal training budgets, and standard procurement paths including GSA Schedule, NASA SEWP V, GPC, and SF-182. Talk to our team and we’ll match you to what fits your situation.