CMMC CCP / CCA Bootcamp
Become a CMMC Professional.
Prepare for defense-contractor compliance (DFARS, NIST 800-171, SSP and POA&M, the CMMC assessment process and SPRS), ready for CMMC analyst and CCP/CCA pathways.
Choose how you learn
One bootcamp. Three ways to take it.
3Same role-based outcome. Pick the format that fits your life. Read it at your own pace with graded feedback, watch the video track, or join the live quarterly cohort.
Instructor-led
Watch the instructor teach on video: a guided track with self-checks, per-module interview prep and a hands-on lab.
In development
Self-paced
Read the full course in the portal at your own pace: lessons, graded quizzes and assignments your instructor reviews.
Available now in the Fourth Tech Hub
Live cohort
Real-time sessions with the practitioner on a quarterly schedule: accountable, interactive, and capped for attention. We open these as cohorts are scheduled.
Next cohort · To be announced
Roles this prepares you for
- CMMC Analyst
- CCP / CCA candidate
- Defense Compliance Specialist
- NIST 800-171 implementation support
- DoD contractor compliance support
Standards & references
You'll build a portfolio of
- CMMC readiness summary
- SSP sample
- POA&M sample
- DFARS clause analysis
- Assessment notes pack
The curriculum
The 8 modules
8Introduction to CMMC & the Defense Ecosystem
Why CMMC exists, CUI/FCI, CMMC levels and the DoD contractor ecosystem.
DFARS Requirements
DFARS 7012 / 7019 / 7020 / 7021, flowdown and incident-reporting timelines.
NIST 800-171 Foundations
The structure and 14 control families, with practical family mapping.
SSP, POA&M & Evidence
Writing the SSP and POA&M, evidence expectations and scoring impacts.
CMMC Assessment Process
Assessment objectives, examine/interview/test and readiness review.
SPRS & Continuous Readiness
SPRS scoring, maintaining readiness and responding to findings.
CCP / CCA Thinking & Practice
The CCP and CCA roles, evidence defensibility, ethics and consistency.
Defense Compliance Career Readiness
Roles, interview questions, portfolio and a final capstone.
The challenge
The rule is in force. Most of the supply chain is not ready.
CMMC turned a self-attestation into something assessed, and the defence industrial base now needs people who can read a control, judge an implementation and write it up.
Scoping decides everything
Get the CUI boundary wrong and every assessment decision after it is wrong too. It is the first question asked and the most common thing done badly.
MET, NOT MET, and the space between
An assessor marks each objective against evidence. Learning to make that call consistently, and to defend it, is the job.
An SPRS score is not a strategy
Plenty of organisations can quote a number and not say what it counts or how to move it.
The transformation
From knowing CMMC exists to assessing against it
The control set first, then the professional body of knowledge, then the assessor's seat.
CMMC is a level and a deadline
You can scope an assessment boundary and say what is in it and why
800-171 is 110 requirements
You read a requirement to its objectives and judge evidence against each one
An SPRS score is a number from somewhere
You can explain exactly what it counts and what moves it
A POA&M is where failures go to be forgotten
You scope milestones and know which requirements may not be deferred at all
Assessment is something done to you
You can sit on either side of it and know what the other will ask
Describes the capabilities this programme is designed to develop. Results vary with experience and effort. Completing a programme does not guarantee employment, promotion or acceptance by any employer.
The programme in numbers
What you actually receive
45
Hours of instruction
18
Modules
70
Lessons
18
Graded quizzes
6
Marked assignments
3
Courses included
Counted from the courses this enrolment grants, not written by hand, so they cannot drift from what you receive.
- CMMC Level 2 Certification Bootcamp — 6 modules, 31 hours
- CMMC CCP Exam Prep — 6 modules, 7 hours
- CMMC CCA Exam Prep — 6 modules, 7 hours
Curriculum
What you will study, module by module
Phase 1: CMMC and the 800-171 control set
- 1.CMMC 2.0 & the Defense Industrial Base5 hours
- 2.The 110 Requirements: Families, Objectives & Assessment Methods5 hours
- 3.Scoping the CUI Environment & the SSP5 hours
- 4.Implementing the Controls & Gathering Evidence6 hours
- 5.SPRS Scoring, POA&M & Staying Compliant5 hours
- 6.The C3PAO Assessment & CMMC Capstone5 hours
Phase 2: The Certified CMMC Professional body of knowledge
- 7.CMMC Ecosystem & Governance1 hour
- 8.CMMC Model Construct & Scoring1 hour
- 9.NIST SP 800-171 Controls1 hour
- 10.Assessment Process & Scoping1 hour
- 11.CUI & the Defense Supply Chain1 hour
- 12.Exam Readiness & Practice Exam2 hours
Phase 3: Assessing, as a Certified CMMC Assessor would
- 13.CMMC Assessment Methodology1 hour
- 14.Evidence & Scoring at Level 21 hour
- 15.NIST 800-171A Assessment Objectives1 hour
- 16.Assessment Planning & Execution1 hour
- 17.Ethics & Professional Conduct1 hour
- 18.Exam Readiness & Practice Exam2 hours
Calendar
A plan that fits around work
Week 1
5 hours
- 1.CMMC 2.0 & the Defense Industrial Base
Week 2
10 hours
- 2.The 110 Requirements: Families, Objectives & Assessment Methods
- 3.Scoping the CUI Environment & the SSP
Week 3
6 hours
- 4.Implementing the Controls & Gathering Evidence
Week 4
10 hours
- 5.SPRS Scoring, POA&M & Staying Compliant
- 6.The C3PAO Assessment & CMMC Capstone
Week 5
7 hours
- 7.CMMC Ecosystem & Governance
- 8.CMMC Model Construct & Scoring
- 9.NIST SP 800-171 Controls
- 10.Assessment Process & Scoping
- 11.CUI & the Defense Supply Chain
- 12.Exam Readiness & Practice Exam
Week 6
7 hours
- 13.CMMC Assessment Methodology
- 14.Evidence & Scoring at Level 2
- 15.NIST 800-171A Assessment Objectives
- 16.Assessment Planning & Execution
- 17.Ethics & Professional Conduct
- 18.Exam Readiness & Practice Exam
Total 45 hours across 18 modules. Hours are the time the material is built to take, not a cap: nothing stops you going slower or faster.
Fit
Is this programme for you?
This is for you if
- You work with, or want to work with, defence contractors and their suppliers.
- You are heading toward CCP or CCA and want the capability before the exam.
- You already know some NIST and need the assessment discipline on top of it.
- You will do the written work. Assessment is a writing job before it is anything else.
This is not for you if
- You want a certificate for a CV line without doing the written work.
- You need an accredited or regulator-recognised qualification. This is a Fourth Tech certificate, not an accredited award, and we say so rather than implying otherwise.
- You want the official CCP or CCA examination. Those are administered by the Cyber AB and its authorised training partners, not by us. This develops the capability and is not a substitute for the certification.
- You are looking for an authorised C3PAO assessment of your own organisation. That is a service, not a course.
Outcomes
What you will be able to do
- Scope a CMMC assessment boundary and justify what sits inside it
- Read an 800-171 requirement down to its assessment objectives
- Judge evidence against each objective and record MET or NOT MET defensibly
- Explain an SPRS score: what it counts, and what changes it
- Build a POA&M that distinguishes what may be deferred from what may not
- Prepare an organisation for assessment, and sit on the assessor's side of the table
What you need
- No prior experience in the field. The programme starts from the vocabulary.
- A computer with a modern browser. The labs run in the browser, so no virtual machine and no particular operating system.
- Time for the written assignments. They are marked against a rubric, and skipping them removes the only thing that distinguishes you afterwards.
- No clearance, no contract and no CUI. Every example is built from public references.
Your path to the certificate
- 01
Enrol
Pay once and the programme opens in your portal immediately.
- 02
Work the phases
Each phase is a complete course in its own right, sequenced so the work compounds.
- 03
Submit the assignments
Each module has a quiz marked on our server and an assignment marked against a rubric.
- 04
Build the capstone
A single piece of work across the whole programme, which becomes your portfolio centrepiece.
- 05
Earn the certificate
Issued with a unique ID and a public verification page anyone can check.
Hands-on labs
You don't watch. You do.
6Next cohort · To be announced
Secure your seat for $2,000.
You're in as soon as you pay: the full program opens in your portal right away, to work through at your own pace. When a live cohort is scheduled you'll get its day-by-day plan and sessions as well, and cohorts are capped at 20 seats.