Acronym | Description |
DoD | Department of Defense |
OUSD(A&S) | Office of the Under Secretary of Defense for Acquisition & Sustainment |
FAR | Federal Acquisition Regulation |
DFARS | Defense Federal Acquisition Regulation Supplement |
SPRS | Supplier Performance Risk System |
DIB | Defense Industrial Base |
OSC | Organization Seeking Certification |
CMMC | Cybersecurity Maturity Model Certification |
C3PA0 | CMMC Third-Party Assessment Organization |
CAICO | CMMC Assessors and Instructors Certification Organization |
CCP | Certified CMMC Professional |
PA | Provisional Assessor |
CCA | Certified CMMC Assessor |
RP | Registered Practitioner |
RPA | Registered Practitioner Advanced |
RPO | Registered Practitioner Organization |
LTP | Licensed Training Provider (for CMMC) |
LPP | Licensed Publishing Partner (for CMMC) |
PI | Provisional Instructor |
CCI | Certified CMMC Instructor |
CUI | Controlled Unclassified Information |
FCI | Federal Contract Information |
NARA | National Archives and Records Administration |
FIPS | Federal Information Processing Standard |
NIST | National Institute of Standards and Technology |
SSP | System Security Plan |
POAM | Plan of Action & Milestone |
These acronyms are frequently used in CMMC-related discussions, documents, and assessments, and are important for contractors and organizations seeking to comply with the CMMC requirements to understand.