While CMMC requirements have not been fully implemented just yet for businesses working with the DoD, the process for opening up applications to become a CMMC auditor has been initiated. After slow progress, in the beginning, things have gradually gained momentum and now we have somewhat of a solidified course of action for those looking to become CMMC auditors and certifiers. However there are still several variables involved and while this does look like how things are going to proceed, there is no certain decision in how long the process will take.
At the moment there is the option to opt for the CMMC Certifier course both as an individual and as a company. Though the duration of the entire process to become a certified professional or have your company qualify as an entity that is authorized to audit firms is still not finalized. If you are interested in becoming an auditor or registering your company as a CMMC auditing firm, these are the steps you need to take.
-
Registration
In order to register with the CMMC to become an auditor, you can head on over to the official CMMC website and submit your application to initiate the process. Together with your application, you will also need to forward a non-refundable registration fee of $200. The registration fee and registration process are the same for all levels of auditors, though the exams you take and the qualifications that you meet will determine the level of CMMC certifications you will be able to provide.
-
Choose Your Specialty
Within the CMMC framework companies will be awarded compliance certifications for various levels ranging from CMMC 1 – CMMC 5. All of these levels require specialized auditors who are qualified to inspect the necessary levels of company performance and to qualify them for that level of CMMC compliance.
The very first stage of auditors are known as Certified Professionals (CPs) and they are required to have at least 2 years of IT experience together with a relevant technical degree. This is the stage that auditors will start out from though if you meet the requirements of higher tiers you can directly apply for those as well.
The second tier consists of auditors known as Certified Assessors (CAs) and they can certify companies at all levels depending on their own qualifications and knowledge. For instance as a CMMC Level 3 Assessor you are required to have at least 4 years of IT experience together with a relevant degree and in-depth knowledge about the processes a CMMC Level 3 company is expected to demonstrate. For the highest tier of Level 5 companies assessors need to have participated in at least 15 Level 3 assessments together with their own experience and relevant degrees.
-
Fulfill Requirements And Pass The Exams
Different exams for the different levels of assessors will range from $275 for the basic levels to nearly $500 for the higher tier qualifications. While the exams are one cost you also need to get relevant training which will be provided by the CMMC though prices for trainings have not been announced yet. Moreover, you also need to keep in mind that in order to retain your Assessor status for whichever level you certify you will also be required to pay an annual maintenance fee of $500. Lastly, the duration of the required trainings has also not been announced so it is uncertain how much they will cost and how long it will take to complete training to become eligible for examinations.
As things get more streamlined these intricacies will become more transparent though for now, you can get an idea of what the overall process looks like and the associated costs you should expect to incur.
714-333-9620