CCP vs CCA: Which CMMC Certification Do You Need?

The Cyber AB offers two certification paths for CMMC professionals. Understanding the difference between CCP and CCA determines what services you can offer — and what you can charge.

What Is the Cyber AB?

The Cybersecurity Maturity Model Certification Accreditation Body (Cyber AB) is the official accreditation organization for the CMMC ecosystem. It trains, certifies, and authorizes all individuals and organizations involved in CMMC assessments and consulting. Every legitimate CMMC professional is registered through the Cyber AB marketplace at cyberab.org.

The CCP: Certified CMMC Professional

The CCP is the entry-level credential. It qualifies you to provide CMMC advisory services, help organizations prepare for assessments, and implement NIST 800-171 controls. To earn it, you complete a three-day Registered Provider Organization (RPO) training course and pass the CCP exam. Cost: $2,000 to $3,000 for training plus a $300 to $500 exam fee. Time: four to eight weeks from enrollment to certification. The CCP does not authorize you to conduct official CMMC assessments — you are an advisor, not an assessor.

The CCA: Certified CMMC Assessor

The CCA authorizes you to conduct official Level 2 CMMC assessments as part of a C3PAO team. Requirements are more stringent: you must already hold a CCP, complete additional CCA training, pass a background check, and be sponsored by an accredited C3PAO (Certified Third-Party Assessment Organization). Cost: $5,000 to $8,000 total. Time: three to six months. CCAs can charge significantly more — $250 to $400 per hour — because they provide assessment authority, not just advice.

Which Should You Pursue First?

Start with the CCP. It gets you into the market faster, at lower cost, and lets you build a client base while you pursue CCA if that's your eventual goal. Most solo consultants find that CCP-level advisory work — gap assessments, SSP development, SPRS preparation — is sufficient to build a $150,000 to $300,000 annual practice without ever needing CCA authority.

Cost and Time Summary

CCP: $2,500 to $3,500, four to eight weeks. CCA: $5,000 to $8,000 additional, three to six months after CCP. Both require annual continuing education to maintain.

Ready to launch your practice? See our Consultant Launchpad for the complete step-by-step guide.