Skip to main content
background

The Cyber AB (formerly CMMC Accreditation Body)

The Cyber AB is the sole authorized accreditation body for CMMC. It accredits C3PAOs, certifies individual assessors, maintains the Cyber AB Marketplace, and performs quality reviews on assessment reports before certifications are issued. The organization was originally called the CMMC Accreditation Body (CMMC-AB) and rebranded to The Cyber AB in 2022. Authority and responsibilities did not change with the rebrand.

What the Cyber AB Does

  • Accredits C3PAOs under ISO/IEC 17020.
  • Certifies Certified CMMC Assessors (CCAs) who staff C3PAO assessment teams.
  • Credentials Registered Practitioners (RPs) and Registered Practitioner Organizations (RPOs) who provide CMMC consulting.
  • Authorizes training providers (ATPs) and publishing partners (APPs).
  • Reviews C3PAO assessment reports for quality before certifications are issued.
  • Maintains the Cyber AB Marketplace at cyberab.org.

The Cyber AB Marketplace

Marketplace at cyberab.org is the authoritative public directory. Filter by C3PAO, RPO, ATP, or individual credential holder. Verify status before engaging: some listings might show organizations that lost credentials. Always cross-check the 'status' field. Don't hire a C3PAO or RPO based on a third-party directory; use the Cyber AB Marketplace itself.

Cyber AB vs CMMC PMO

The CMMC Program Management Office is inside the DoD (under USD(A&S)). The CMMC PMO owns program policy: rulemaking, clause language, strategic direction. The Cyber AB is the contracted accreditation body that operates the assessment infrastructure. Policy disputes go to the CMMC PMO; accreditation and assessment questions go to the Cyber AB.

The Rebrand from CMMC-AB

In 2022, CMMC-AB renamed to The Cyber AB. The new name reflects the organization's interest in serving as a broader cybersecurity accreditation body. For CMMC purposes, nothing changed. References to CMMC-AB in older documentation or contracts refer to the same entity now operating as The Cyber AB.