CCP Requirements 2026: Who Can Sit the Exam and What It Costs
Before you can book a seat you have to clear The Cyber AB’s eligibility gates. Here is exactly what they check, in the order they check it.
Table of Contents
What the CCP credential is
Cyber AB CCP - Certified CMMC Professional is awarded by The Cyber AB. It is not a course certificate you can buy your way into — The Cyber AB decides whether you are allowed to sit the exam at all, and that decision is made before you ever see a question. Candidates who treat the application as a formality are the ones who lose a testing window to a paperwork problem.
The eligibility gates, in order
The Cyber AB checks these in sequence, and failing any one of them stops the application. Work through them top to bottom before you pay a fee.
Gate 1
A college degree in a cyber or information technology field, or two or more years of related experience or education
Gate 2
Plus two or more years of equivalent experience, military service included, in a cyber, IT or assessment role
Gate 3
Mandatory CCP training completed through an Approved Training Provider before you can be certified
From the date you register you have six months to sit the exam. Delivered at PSI centres or remotely proctored, with continuous registration - you can book an appointment as soon as 48 hours after paying. The CCP is also the gate to the CCA: the assessor track does not open until this one is passed.
What it costs
The Cyber AB sets fees per application cycle and changes them often enough that a figure quoted here would age badly. Check the official page linked in the sidebar before you budget — and budget for a retake as well, which is charged separately.
What the exam itself looks like
How long the process takes
Three clocks run at once and candidates usually notice only two. The first is the experience clock: the hours or years in the gates above have to be accrued, and in most programmes accrued recently, so time spent in the wrong role does not count no matter how long you spent there. The second is the approval clock: transcripts, licence verification and reference checks are done by people rather than scripts, and they run in weeks rather than days. The third is the eligibility window: once approved you have a fixed period to sit the exam, and letting it lapse means reapplying and paying again.
Plan backwards from the date you want the credential in hand, not forwards from the day you decide to start. The paperwork is the part that is outside your control, so it should go first.
Why applications get sent back
The failure modes are boring and they repeat. Hours logged in a role that does not match the definition in the handbook. A transcript sent by the candidate instead of by the school. A licence that is current but carries a restriction. Experience that is genuine but falls outside the lookback window. None of these are judgement calls you can argue your way past — they are checkboxes. Read the eligibility page as though it were a contract, because for the purposes of your application it is one.
Once you are approved, the work is question volume. Practise CCP questions free and find out where you actually stand before you book a date.
FAQ
Who is eligible to sit the CCP exam?
A college degree in a cyber or information technology field, or two or more years of related experience or education Plus two or more years of equivalent experience, military service included, in a cyber, IT or assessment role Mandatory CCP training completed through an Approved Training Provider before you can be certified
How much does the CCP exam cost?
The Cyber AB sets the fee per cycle. Check the official certification page for the current figure, and budget separately for a retake.
How many questions are on the CCP exam?
The Cyber AB publishes the current item count in the candidate handbook.
How long does CCP approval take?
Verification is manual, so allow weeks rather than days between submitting an application and being cleared to schedule. Once you are approved a fixed eligibility window starts running, and letting it expire means paying to apply again.
Sources
Every figure on this page comes from the certifying body, not from a third-party summary:
- https://cyberab.org/CCP-Exam-Information
- https://cyberab.org/portals/0/Documents/BecomingaCybersecurityMaturityModelCertificationAssessor.pdf
Checked September 2, 2026. Fees and eligibility rules change; confirm against The Cyber AB before you pay anything.