The official nonprofit entity designated by the Department of Defense to manage the Cybersecurity Maturity Model Certification (CMMC) program. Formerly known as the CMMC Accreditation Body (CMMC-AB), it is now referred to as the Cyber AB.
The Cyber AB is responsible for overseeing the entire CMMC ecosystem. Its key functions include:
-
Accrediting C3PAOs (Certified Third-Party Assessment Organizations) that conduct independent CMMC assessments.
-
Training and certifying professionals such as Certified CMMC Professionals (CCPs) and Certified CMMC Assessors (CCAs).
-
Developing standards and guidance for how CMMC assessments are performed.
-
Ensuring the integrity and consistency of the certification process across the Defense Industrial Base (DIB).
By serving as the governing body, the Cyber AB acts as the bridge between the DoD and industry, ensuring that contractors meet the cybersecurity standards required to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI).