thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cyber AB · Governance, Risk & Privacy · Professional

CMMC Certified CMMC Professional (CCP) exam guide

Exam CCP

The Certified CMMC Professional (CCP) is the entry credential in the CMMC assessment ecosystem, proving you understand the CMMC model, assessment process and scoping for defense contractors. With CMMC requirements now appearing in DoD contracts, CCPs support assessments and help contractors prepare, and CCP is required before becoming a Certified CMMC Assessor.

QuestionsSee official page
Time limitSee official page
Passing scoreSee official page
Exam fee$760 USD
Valid for3 years
DeliveryPSI test center or remotely proctored (administered by ISACA as the CMMC CAICO)

Format: Computer-based exam. Fee note: ISACA member price $575; plus $200 application processing fee. Training from an Approved Training Provider required.

Who it's for

Consultants, compliance staff and IT professionals at defense contractors or Registered Provider Organizations working on CMMC readiness.

What the exam covers

CMMC Ecosystem—
CMMC-AB Code of Professional Conduct (Ethics)—
CMMC Governance and Source Documents—
CMMC Model Construct and Implementation Evaluation—
CMMC Assessment Process (CAP)—
Scoping—

A dash means the vendor does not publish a weight for that domain.

Eligibility & prerequisites

Required: Complete a CCP course from an Approved Training Provider, pass the exam, and receive a favourable Tier 3 determination (or DoD-accepted equivalent or clearance). The Cyber AB recommends a cyber/IT degree or two years of related experience and CompTIA A+ level knowledge.

Recommended: Familiarity with NIST SP 800-171, CUI handling and DoD contracting.

Keeping it active

Three-year cycle: 120 CPE (at least 20 per year), with at least 90 related to the certification including two CMMC-specific CPEs, plus annual renewal fees.

Skills & careers

Skills it validates

  • Explaining the CMMC model and levels
  • Interpreting NIST SP 800-171 and CUI requirements
  • Applying the CMMC Assessment Process
  • Scoping assets for assessment
  • Evaluating practice implementation evidence
  • Following the CMMC code of professional conduct

Job roles

CMMC ConsultantCompliance Analyst (Defense Industrial Base)Cybersecurity Compliance ManagerRPO ConsultantGRC Analyst

Where it fits in your path

Take before

CompTIA Security+

You are here

CMMC Certified CMMC Professional (CCP)

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

  1. Week 1: Enrol with an Approved Training Provider and read the CMMC model overview and 32 CFR Part 170.
  2. Week 2: Study NIST SP 800-171 and 800-171A practice and assessment objectives.
  3. Week 3: Learn the CMMC Assessment Process (CAP) and scoping guidance.
  4. Week 4: Review ethics, ecosystem roles and source documents; take practice questions and book.

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam-day tips

  • Know the official source documents and which one governs each topic.
  • Scoping questions are common: learn asset categories (CUI, security protection, contractor risk managed, specialized, out of scope).
  • Expect ethics scenarios from the Code of Professional Conduct.
  • Start the Tier 3 background process early; it can take months.

Key terms for this exam

All 25 terms Study with thinQcards™

Frequently asked questions

How much does CCP cost?

Exam $575 (ISACA members) or $760, plus a $200 application fee and ATP training.

Who runs the CCP exam?

ISACA, as the CMMC Assessors and Instructors Certification Organization.

Do I need a security clearance?

You need a favourable Tier 3 determination or an accepted equivalent; it is not a clearance itself.

Is CCP worth it?

Yes if you work in the defense industrial base; CMMC demand is growing as contracts include it.

What comes after CCP?

The Certified CMMC Assessor (CCA).

Official page: www.isaca.org. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.