No Summer Break for Cyber: Newly Unveiled CMMC Assessment Process Provides Industry with Upcoming Assessment Insights
Client Alert | 1 min read | 08.01.22
After much anticipation, the Cyber AB, formerly known as the Cybersecurity Maturity Model Certification (CMMC) Accreditation Body, recently released its pre-decisional draft CMMC Assessment Process (CAP). The CAP describes the overarching procedures and guidance that CMMC Third-Party Assessment Organizations (C3PAOs) will use to assess entities seeking CMMC certification. The current version of the CAP applies to contractors requiring CMMC Level 2 certification, which will likely be most contractors handling Controlled Unclassified Information (CUI) based on the Department of Defense’s (DoD) provisional scoping guidance for CMMC 2.0.
Aimed at increasing the accuracy and consistency of assessments conducted by C3PAOs, the CAP is segmented into four distinct phases:
Phase 1: Plan and Prepare the Assessment;
Phase 2: Conduct the Assessment;
Phase 3: Report Assessment Results; and
Phase 4: Close-Out Plan of Action and Milestones (POAMs) and Assessment.
While the assessment process is still in draft form, DoD contractors should familiarize themselves with the proposed structure and conduct of CMMC assessments, as these parameters will be critical to companies attaining CMMC certification at the level requisite for future government contract awards.
The Cyber AB is currently accepting comments on the draft CAP.
Contacts
Insights
Client Alert | 4 min read | 12.30.25
Are All Baby Products Related? TTAB Says “No”
The United States Trademark Trial and Appeal Board (TTAB or Board) recently issued a refreshed opinion in the trademark dispute Naterra International, Inc. v. Samah Bensalem, where Naterra International, Inc. petitioned the TTAB to cancel Samah Bensalem’s registration for the mark BABIES' MAGIC TEA based on its own BABY MAGIC mark. On remand from the U.S. Court of Appeals for the Federal Circuit, the TTAB reconsidered an expert’s opinion about relatedness of goods based on the concept of “umbrella branding” and found that the goods are unrelated and therefore again denied the petition for cancellation.
Client Alert | 6 min read | 12.30.25
Investor Advisory Committee Recommends SEC Disclosure Guidelines for Artificial Intelligence
Client Alert | 2 min read | 12.29.25
FYI – GAO Finds Key Person “Available” Despite Accepting Employment with a Different Company
Client Alert | 4 min read | 12.29.25
More Than Math: How Desjardins Recognizes AI Innovations as Patent-Eligible Technology


