This is the main content of the page.

 
 

Ecosystem ProfessionsCMMC Implementation Consulting

Registered Practitioners and Registered Practitioner Organizations 

CMMC needs to be implemented before it can be assessed.  Accordingly, there is a demand for individuals and companies who understand CMMC, who are invested in it, and who know how to prepare defense contractors for implementation and eventual preparation for a CMMC Assessment. These professionals bring their experience as well as their CMMC Registered Practitioner (RP) training knowledge to the Organizations Seeking Certification (OSC) as part of contract engagement.

Individuals holding any level of an RP designation can provide CMMC implementation consulting services to assist in identifying gaps and providing mitigation strategies for an OSC preparing for an assessment. RPs work for Registered Practitioner Organizations (RPO) but can also be contracted as individuals.

Individuals who hold an RP designation can also pursue becoming a Certified CMMC Assessor with the following understanding:

  • Individuals holding multiple designations (RP/RPA and Assessor Certifications) cannot assess a company if they have previously assisted with an implementation for that same company.
  • Assessors may not be fully trained in CMMC implementation preparation activities and should seek to hold an RP designation to work for or act in the capacity of a implementation consultant.
RPs and RPOs are authorized to represent the organization as familiar with the basic constructs of the CMMC Standard with a Cyber AB provided logo.
 

Requirements Grid

Registered Practitioner (RP)
Registration DurationApproximately 3 weeks, including background check
Fee*$600 Application, Training and Testing
Renewal Terms$500 Annual renewal fee. Note: If you attain RPA, you will only be annually renewing your RPA.
CitizenshipU.S., Australia, NATO countries and South Korea citizenship is required.

NOTE: International background checks cost $125 USD and will be billed separately.
Registered Practitioner Advanced (RPA)
Registration DurationApproximately 3 weeks, however, MUST be an active RP and meet eligibility requirements
Fee*$1,000 Application, Training and Testing
Renewal Terms$750 Annual renewal fee
CitizenshipU.S., Australia, NATO countries and South Korea citizenship is required
Registered Practitioner Organization (RPO)
Registration DurationApproximately 3 weeks, including background check
Fee*$6,000 Application
Renewal Terms$5,000 Annual renewal fee
CitizenshipSee RP and RPA Citizenship Requirements
Candidate
Registration Duration
Fee*
Renewal Terms
Citizenship
 
Registered Practitioner (RP)
Approximately 3 weeks, including background check
$600 Application, Training and Testing
$500 Annual renewal fee. Note: If you attain RPA, you will only be annually renewing your RPA.
U.S., Australia, NATO countries and South Korea citizenship is required.

NOTE: International background checks cost $125 USD and will be billed separately.
 
Registered Practitioner Advanced (RPA)
Approximately 3 weeks, however, MUST be an active RP and meet eligibility requirements
$1,000 Application, Training and Testing
$750 Annual renewal fee
U.S., Australia, NATO countries and South Korea citizenship is required
 
Registered Practitioner Organization (RPO)
Approximately 3 weeks, including background check
$6,000 Application
$5,000 Annual renewal fee
See RP and RPA Citizenship Requirements
 

* Please be advised application submissions have a one (1) year expiration period. If you do not take the next steps to complete the process, for example training and testing, for the related to which you applied,your application will expire one (1) year from applying. You will lose any fees paid and will have to re-apply to start the application process over.

*All fees are inclusive of application processing and membership registration which are non-refundable (please see Refund Policy). Schedule does not include any training, testing or examination fees.

*RPs and RPAs are granted 2 attempts to pass the final exam. If the applicant is NOT able to pass the exam by the second attempt, they will need to reapply after a 30 day cool-down period.

Upon successful completion of the process, all candidates will be presented with additional information to include the authorized use of digital credentials in business materials, listing in the CMMC Central Marketplace and access to the Cyber AB’s community updates.

Registered Practitioner (RP)

an individual
 

RP Enroll Here
 

The Registered Practitioner program is training individuals on the following domains to assist OSCs in preparing for a CMMC assessment

 

Modules:

1: Introduction to CMMC and the CMMC Model
2: The CMMC Accreditation Body and the CMMC Ecosystem
3: Federal Contract Information (FCI)
4: Prime and Subcontract Information Flow
5: CMMC Tools, and templates
6: Implementing the CMMC L1 Framework – In-depth practice implementation walk through – Use of CMMC Tools/templates by practice
7: CMMC Assessment Scoping – High-Level Scoping – FCI Boundary – Environmental Considerations
10: Contract/Agreement fulfillment
11: Conclusion

 

An RP must meet and complete a series of requirements to achieve designation:

  • Register with and receive authorization from the CMMC-AB
  • Be able to pass a commercial background check
  • Complete the online CMMC-AB provided training and pass the respective course exams
  • Sign and acknowledge the (1) CMMC-AB Code of Professional Conduct and (2) an RP Agreement

Registered Practitioner Advanced (RPA)

an individual

RPA Enroll Here

 

The Registered Practitioner Advanced program is training individuals on the following domains to assist OSCs preparing for a CMMC assessment:
 

Modules:

1: Controlled Unclassified Information (CUI)
2: CMMC Tools, and templates
3: CMMC Assessment Scoping – Level 2 (CUI Assets)
4: Implementing the CMMC Framework – In-depth practice implementation walk through

 

Sub-modules:

  • AC Domain
  • AT Domain
  • AU Domain
  • CM Domain
  • IA Domain
  • IR Domain
  • MA Domain
  • MP Domain
  • PE Domain
  • PS Domain
  • RA Domain
  • CA Domain
  • SC Domain
  • SI Domain
5: Understanding the CMMC Assessment Process
6: POA&M/Limited Practice Deficiency Correction
7: Contract/Agreement fulfillment
8: Conclusion

 

An RPA must meet and complete a series of requirements to achieve designation:

  • Complete registration process, training, and exam to achieve Registered Practitioner (RP) status from the CyberAB
    Note:Achieving an RP status must be within the timeframe of September 2020 to no greater than two months from current date of applying for RPA
  • Meet additional experience requirements by having implemented, at minimum, 50+ cybersecurity framework controls that directly correlate to the 110 CMMC Level 2 Practices.
  • If approved, complete RPA training and achieve a passing score on CyberAB RPA exam to earn RPA designation
  • If required, sign any required document, i.e. an updated Code of Professional Conduct (CoPC)

 

Registered Practitioner Organization (RPO)

an organization

RPO Enroll Here

The Registered Practitioner Organization designation is designed for organizations that could provide services within the defense supply chain as an advisory firm or as an MSP (Managed Service Provider).

An RPO must meet and complete a series of requirements to achieve designation:

  • Register with and receive authorization from the CMMC-AB
  • Be able to pass an organizational background check (provide a DUNS number)
  • Associate, at minimum, one (1) Registered Practitioner (RP) the respective RPO
  • Sign and acknowledge the (1) CMMC-AB Code of Professional Conduct and (2) an RPO Agreement

 

Want to become a Member?

Membership into the Cyber AB community, and visibility within the CMMC marketplace, is reserved for those organizations and individuals which successfully complete and pass their respective application and onboarding process, which includes formal review and authorization by the Cyber AB.

Please click on the appropriate enrollment button above to start the process.