Will There Be Enough CMMC Assessors to Certify All DoD Contractors?

Some experts think between 1,000 and 2,000 certified assessors will be required to audit the defense contractors who will now be required to get verification of their controls under the new Cybersecurity Maturity Model Certification program. So far, only 50 have been granted provisional status, allowing them to participate in assessments in so-called pathfinder contracts. Estimates of the number of companies that will need assessments range from 250,000 to 300,000. Furthermore, some will require multiple assessments, and what each assessment entails will depend on the company’s preparation, and the level of certification they are seeking.

