Skip to content
QualExam

The four phases of the CMMC Assessment Process

CAP v2.0 defines four phases: Phase 1 Conduct the Pre-Assessment, Phase 2 Assess Conformity to Security Requirements, Phase 3 Complete and Report Assessment Results, and Phase 4 Issue Certificate and Closeout POA&M.

Recall

The terms and figures from this lesson, one at a time.

Card 1 of 3Level 3 of 5

Name the four phases of the CMMC Assessment Process.

This deck does not remember you yet. Spaced repetition arrives with accounts.

Check yourself

1. How many phases does the CMMC Assessment Process define, and what is the first?
2. In which phase is the certificate issued and any POA&M closed out?
3. Reporting assessment results falls within which phase?

By QualExam editorial. Written against the awarding body’s published blueprint and checked against it on every build.

Source: ISACA CCA/CCP Exam Candidate Guide

Last checked against the source: 2026-09-22