The independent accreditation body for the Pentagon's Cybersecurity Maturity Model Certification program is collecting information from potential vendors who are able to provide a platform for assessors to take their exams for certification.
In a request for information released on Thursday, the CMMC Accreditation Body said it is collecting "market research" to help the organization "with identifying interested and capable sources for solicitation of one organization to support the creation and delivery of exams to evaluate and certify professionals in the CMMC ecosystem."
The CMMC AB is aiming to gather information around "gaining knowledge of commercial practices, identifying risks, identifying potential requirements definition and contract construct alternatives, identifying appropriate request for proposal and contract terms and conditions, and identifying potential evaluation discriminators and evaluation approaches."
"CMMC-AB desires a global exam development and delivery solution and expects to partner with an organization who can deliver services around the globe and in multiple languages," according to the RFI. "CMMC-AB anticipates development of a majority of the content in the United States and in English. However, DOD and U.S. Government operations across multiple countries, as well as future engagement with allied nations, result in an anticipated requirement to support professionals who seek to learn about CMMC in other countries and languages."
The RFI lists exam capabilities and procedures, and asks for fee rates for the design, development and delivery of the exam solution. The CMMC AB is also looking for details from companies on "representative experience on efforts of similar scope and scale. This includes client lists, case studies, references, etc."
In a separate RFI, the accreditation body asks for details on solutions to review third-party developed training.
"Ultimately, the CMMC-AB anticipates a solicitation resulting in selection of a single organization to support the review and quality assurance of educational content developed and marketed by partner organizations," the CMMC writes in the second RFI.
The accreditation body is looking to get details on several solution capabilities including:
The CMMC AB is asking for responses for both RFIs to be submitted by June 10.