What ISACA’s Role as CAICO Means for the CMMC Community

If you’re involved with CMMC credentials, you’ve probably heard that ISACA is now operating as the CMMC Accreditation Body’s Certification and Credentialing Organization (CAICO). That shift raises a lot of practical questions, especially for current and prospective CCPs and CCAs.

Here’s a clear rundown of what’s changing, what’s staying the same, and what you should pay attention to next.

What’s Changing Now

As CAICO operations transition fully to ISACA, several updates take effect starting in early April.

Certification exams
CCP and CCA exams will now be delivered through PSI, the same testing provider ISACA uses for its other certifications. One benefit of this move is speed. Exam takers will receive preliminary results as soon as they finish the exam.

New candidate registration
Anyone beginning the CCP or CCA certification process will now do so directly through ISACA. The updated certification pages are expected to go live at the start of April, streamlining how candidates register and manage their progress.

Digital badges
Updated digital credentials will be available shortly. Existing credential holders will receive instructions explaining how to claim their new badge, and the process is expected to be straightforward.

Continuing education requirements
ISACA’s continuing professional education model will now apply to CMMC credentials. That means maintaining CCP or CCA status will require ongoing learning, with annual and multi-year CPE minimums aligned to ISACA’s broader credentialing framework. A CMMC-specific breakdown is still coming, but the general CPE policy is already available on ISACA’s website.

Learning and Community Opportunities

ISACA is also increasing its outreach to the CMMC community.

A free webinar focused on CMMC requirements, professional roles, and credentials is coming up soon. It’s designed to be especially helpful for professionals who are newer to CMMC or considering whether pursuing a credential makes sense for them.

ISACA will also be present at major industry events, including RSA Conference, where attendees can connect directly with the team and learn more about how ISACA is supporting the CMMC ecosystem.

In addition, ISACA plans to continue engaging through Cyber AB town halls and by expanding online FAQs and resources as questions arise during the transition.

What to Expect Going Forward

The move to ISACA as CAICO is about standardizing and scaling how CMMC credentials are administered. Over the coming months, expect clearer guidance, more consistent processes, and better integration with established certification infrastructure.

If you’re pursuing or maintaining a CMMC credential, the key takeaway is simple: stay informed, watch for official updates, and take advantage of the learning opportunities as they come up.

We’ll continue to track these changes and share practical guidance as the CMMC credentialing landscape evolves.