Study guide

CMMC CCP study guide

Read a lesson, then practice the ideas you want to remember.

Lessons

  1. CAP Preliminary Proceedings & Phase 1 Pre-As
  2. CAP Phase 2: Assess Conformity to Security R
  3. Assessment Objectives, Evidence Sufficiency
  4. CAP Phase 3: Complete and Report Assessment
  5. CAP Phase 4: Certificate Issuance & POA&M Cl
  6. Level 2 POA&M Rules, Exclusions & 180-Day Cl
  7. Cloud Service Providers: FedRAMP Moderate Eq
  8. External Service Providers & Shared Responsi
  9. Subcontractor Flow-Down, Supply Chain Govern
  10. Assessor Roles: CCP, CCA, Lead CCA, QA & Cer
  11. Governance & Oversight: DoD, DIBCAC, Cyber A
  12. Industry Roles: C3PAOs, OSCs, Consultants, A
  13. CMMC Three-Level Architecture, Assessment Ty
  14. Level 1: 15 FAR Safeguarding Requirements &
  15. Level 2 & Level 3: CUI Protection and Assess
  16. The 5 Asset Categories: CUI, SPA, CRMA, Spec
  17. Boundary Definition, Data Flow Diagrams & Se
  18. Scoping Fundamentals: Organizational Scope,
  19. Confidentiality, Incident Escalation & Misco
  20. Conflicts of Interest, Independence & Consul
  21. Applying the CMMC Code of Professional Condu
  22. Access Control Domain: 22 Practices & Core I
  23. Identification & Authentication Domain: MFA
  24. System & Communications Protection Domain: B
  25. Audit & Accountability Domain: Logging, Revi
  26. Configuration Management Domain: Baselines,
  27. Maintenance & Media Protection Domains: Sani
  28. Awareness & Training & Personnel Security Do
  29. Incident Response, System Integrity & Risk A
  30. Physical Protection: Level 1 FAR Requirement
  31. Eligibility, Training, Retakes & Certificati
  32. Exam Structure, Current Logistics & Official
  33. Study Strategy, Blueprint Mapping & Authorit
  34. FAR, DFARS & 32 CFR Part 170 — Free Study Guide 2026
  35. FCI vs CUI: Statutory Foundations, E.O. 1355
  36. NIST Standards Hierarchy: SP 800-171, SP 800