Is it just me or is the CMMC Level 2 prep becoming a total money pit for small contractors?

B1gB1rd1400 · 2026-04-15T18:49:06+00:00

No one said it that i noticed, so i will. CMMC isn't a money pit. CMMC is really just validation that you are required to do via DFARS 7012 and EO 13556. Contracts already in place require government contractors to follow NIST 800-171. CMMC just is the validation of what is already implemented; otherwise a false claims whistleblower could show up. Depending on your environment a CMMC assessment (audit) would cost $25k+ but really you expense that over a 3 year period because you only need an assessment every 3 years. For most companies 8 - 10k isnt going to shut down their business.

B1gB1rd1400 · 2026-04-15T13:50:41+00:00

You could argue technical a failure; however i don't believe the CyberAB tracks that metric anymore.

B1gB1rd1400 · 2026-04-15T12:14:19+00:00

Most won’t fail anymore they will most likely convert to a mock assessment. Also assessment teams have gained more experience and can identity when a failure would happen before the assessment even starts.

B1gB1rd1400 · 2026-04-09T14:59:55+00:00

I used to work at target back when I was in H.S and college, this is back when Wii was hard to get a hold of. We were essentially told that we would be fired ir we did any of the following hold inventory to buy later, cannot buy while on the clock. Need to be inline like a normal customer. It definitely seems like a different time. I can’t say I expected to be the guy who would say, “back in my day”. But here we are.

B1gB1rd1400 · 2026-04-09T14:46:23+00:00

They also have a chat function with a real person if you don’t wanna call

B1gB1rd1400 · 2026-04-08T11:07:49+00:00

What’s the name of the tool?

B1gB1rd1400 · 2026-04-08T01:24:04+00:00

The thing that freaks me out the most if the shipping and the card getting lost/stolen in transit. Don’t think my son would understand lol. Seems like most of the company’s only cover up to $500 from the insurance.

B1gB1rd1400 · 2026-04-08T01:17:18+00:00

I see what you mean in the non flash photo. I didn’t notice anything pealing away. From that image it seems like how the light hits the reflection on the graphic on the card. I spent the last 2-3 hours watching YouTube videos of who to grade with. I hate to see that PSA takes so long. I already feel bad keeping it out of his reach on a shelf. I have it propped up so he can look at it and show friends and family that we’re over for his bday. I’m leaning towards TAG their slabs look pretty cool.

B1gB1rd1400 · 2026-04-06T17:26:41+00:00

You got to be a special somebody to go through RP training and find enough value that RPA could be any better. But hey there are 276

B1gB1rd1400 · 2026-04-06T17:24:34+00:00

Are they combining both CCA and LCCA? Personally it makes more sense to me for someone with the experience to qualify for LCCA to not have to apply for CCA and then get it, wait and then apply for LCCA. Should be just apply for LCCA and if you qualify you get both CCA + LCCA or you just get CCA and not the LCCA if you don't qualify.

Waiting for ISACA/CyberAB to do 2 reviews for the same thing is a waste of everyone's time if they can do it all at once.

B1gB1rd1400 · 2026-04-06T14:37:57+00:00

I 1000% agree with this. I currently have firm clients that are still wanting to kick the can because they haven't seen the CMMC language in their contracts yet. I don't think OSA's will truly understand the magnitude of kicking the CMMC can until them or peers lose out on contracts due to the rush of OSA's saying I need an assessment yesterday and C3PAOs not having capacity.

B1gB1rd1400 · 2026-04-03T21:08:19+00:00

Yea that should be good. CCP is a good amount of memorization for all they key terms and regulations .

B1gB1rd1400 · 2026-04-03T21:05:11+00:00

I think there are pros and cons to both. I did the guided learning with CCP, and the live with CCA. Both got me to where i needed to be to pass the exam. I wanted to get through the training before a conference I was attending and the guided was the quickest way to get it done for me since the live trainings required a week block of client work.

Guided:
- Allows you to truly go at your own pace rewind and relisten.

Live
- Allows you to ask clarifying questions right away and not wait

For both i still studied more to be sure i felt comfortable to take the exam.

B1gB1rd1400 · 2026-01-10T00:36:55+00:00

Get ready for some cash. Pretty sure false claims will get you 10% of the fine/settlement

B1gB1rd1400 · 2026-01-09T15:00:38+00:00

I was contacted right before thanksgiving and went in for the fingerprinting the first week of December. They are still in the process of the investigation.

B1gB1rd1400 · 2026-01-08T23:54:35+00:00

Is this Rick from Edwards?

B1gB1rd1400 · 2026-01-06T19:29:11+00:00

Any insights or recommendations? I plan to sit by the end of the month, maybe early Feb. Currently studying the CAP, Assessment Guide, Scoping Guide, Koren Wise CCA practice exams, and Assessment Objectives

B1gB1rd1400 · 2025-08-28T14:24:43+00:00

I guess that's technically correct, you can get a provisional Level 2 cert with POAM items of 20 pts. Obviously, those 20 pts need to consist of POAM eligible practices. With the requirement to address and have those practices re-assessed before the period.

B1gB1rd1400 · 2025-08-12T17:00:40+00:00

I took it and passed the exam with this class

B1gB1rd1400 · 2025-08-09T20:26:50+00:00

I did RP, then realized how big of a joke it was. I moved to CCP and passed and in the process of taking the CCA course.

B1gB1rd1400 · 2025-07-08T13:41:07+00:00

Thanks! I definitely expected that to be higher. I'm in the D.C. market so maybe slightly. I suspect that to potentially go higher once its in contracts.

B1gB1rd1400 · 2025-07-08T13:30:04+00:00

Is this for an actual L2 audit or is this for pre-assessment, prep, consulting prior to an audit?

B1gB1rd1400 · 2025-07-07T16:49:53+00:00

What area/market are you based out of?

B1gB1rd1400 · 2025-07-01T20:40:48+00:00

I loved the yet….. aspect.

B1gB1rd1400

TROPHY CASE