01
CMMC Ecosystem & Governance
DoD/DIB structure, ISACA as CAICO, CyberAB Marketplace, DFARS/CFR context
02
Ethics & Professional Conduct
ISACA Code of Professional Conduct, CoPC obligations, conflict of interest
03
CMMC Model Construct
FCI/CUI handling, CMMC Levels 1–3, 110 practices, 14 domains
04
Practices & Assessment Criteria
NIST SP 800-171 Rev 2, evidence analysis, assessment methods
05
CMMC Assessment Process
4 phases: Plan, Conduct, Report, POA&M evaluation
06
Scoping & System Boundaries
Asset categorization, CUI data flows, SSP structure, OSC readiness