Study guide
CMMC CCP study guide
Read a lesson, then practice the ideas you want to remember.
Lessons
- CAP Preliminary Proceedings & Phase 1 Pre-As
- CAP Phase 2: Assess Conformity to Security R
- Assessment Objectives, Evidence Sufficiency
- CAP Phase 3: Complete and Report Assessment
- CAP Phase 4: Certificate Issuance & POA&M Cl
- Level 2 POA&M Rules, Exclusions & 180-Day Cl
- Cloud Service Providers: FedRAMP Moderate Eq
- External Service Providers & Shared Responsi
- Subcontractor Flow-Down, Supply Chain Govern
- Assessor Roles: CCP, CCA, Lead CCA, QA & Cer
- Governance & Oversight: DoD, DIBCAC, Cyber A
- Industry Roles: C3PAOs, OSCs, Consultants, A
- CMMC Three-Level Architecture, Assessment Ty
- Level 1: 15 FAR Safeguarding Requirements &
- Level 2 & Level 3: CUI Protection and Assess
- The 5 Asset Categories: CUI, SPA, CRMA, Spec
- Boundary Definition, Data Flow Diagrams & Se
- Scoping Fundamentals: Organizational Scope,
- Confidentiality, Incident Escalation & Misco
- Conflicts of Interest, Independence & Consul
- Applying the CMMC Code of Professional Condu
- Access Control Domain: 22 Practices & Core I
- Identification & Authentication Domain: MFA
- System & Communications Protection Domain: B
- Audit & Accountability Domain: Logging, Revi
- Configuration Management Domain: Baselines,
- Maintenance & Media Protection Domains: Sani
- Awareness & Training & Personnel Security Do
- Incident Response, System Integrity & Risk A
- Physical Protection: Level 1 FAR Requirement
- Eligibility, Training, Retakes & Certificati
- Exam Structure, Current Logistics & Official
- Study Strategy, Blueprint Mapping & Authorit
- FAR, DFARS & 32 CFR Part 170 — Free Study Guide 2026
- FCI vs CUI: Statutory Foundations, E.O. 1355
- NIST Standards Hierarchy: SP 800-171, SP 800