REFERENCE
CMMC Glossary
Plain-language definitions for terms used across The Cyber AB platform, accreditation programs, and the CMMC ecosystem.
- ATP
- Authorized Training Provider. An organization authorized by The Cyber EF to deliver CMMC-related training.
- Browse marketplace
- CAICO
- Cybersecurity Assessor and Instructor Certification Organization. The entity that will manage assessor and instructor certification, transitioning from The Cyber AB.
- CCA
- CMMC Certified Assessor. A credentialed professional qualified to conduct CMMC assessments under C3PAO oversight.
- Search registry
- CCP
- CMMC Certified Professional. The entry-level assessor credential in the CMMC credential ladder.
- Search registry
- C3PAO
- CMMC Third-Party Assessor Organization. An organization accredited by The Cyber AB to conduct CMMC assessments.
- C3PAO Directory
- CMMC
- Cybersecurity Maturity Model Certification. A Department of Defense program requiring organizations in the Defense Industrial Base to demonstrate defined cybersecurity practices.
- What Is CMMC?
- Cyber EF
- The Cyber Engagement Forum. Supports pre-assessment consulting, readiness preparation, training, and market facilitation for CMMC stakeholders.
- Visit Cyber EF
- CUI
- Controlled Unclassified Information. Information that requires safeguarding or dissemination controls pursuant to law, regulation, or government-wide policy.
- DIB
- Defense Industrial Base. The worldwide industrial complex that enables research and development, design, production, delivery, and maintenance of military weapons systems and components.
- DIBCAC
- Defense Industrial Base Cybersecurity Assessment Center. A DoD organization that conducts CMMC Level 3 assessments in coordination with accredited C3PAOs.
- Exchange
- The external platform where marketplace matches complete contracting, document sharing, and procurement after initial discovery and intake on The Cyber AB site.
- FCI
- Federal Contract Information. Information provided by or generated for the government under a contract, not intended for public release.
- LCCA
- Lead CMMC Certified Assessor. An advanced credential required for assessment leadership, including Tier 3 qualification for Level 3 assessments.
- Search registry
- OSC
- Organization Seeking Certification. A company pursuing CMMC certification to meet contract requirements.
- Getting certified
- RP
- Registered Practitioner. An individual registered with The Cyber EF to provide CMMC readiness and consulting services.
- Browse marketplace
- RPA
- Registered Practitioner Advanced. An advanced Registered Practitioner credential for experienced readiness professionals.
- Browse marketplace
- RPO
- Registered Provider Organization. An organization registered with The Cyber EF to deliver CMMC readiness and consulting services.
- Browse marketplace
- SCF-PAO
- SCF Third-Party Assessment Organization. An organization accredited under the Secure Controls Framework Conformity Assessment Program.
- SCF-PAO program