ISACA OC Monthly Event - May 2026
ISACA has been authorized to operate the CMMC Assessor and Instructor Certification Organization (CAICO), taking responsibility for the training, examinations, and professional certifications that…
About this event
ISACA has been authorized to operate the CMMC Assessor and Instructor Certification Organization (CAICO), taking responsibility for the training, examinations, and professional certifications that underpin the CMMC workforce (including CCP, CCA, and Lead CCA). CMMC started roll-out as a requirement for DoD contractors in November, 2025, with phased implementation and increasing requirements over the next several years. Defense contracts are shifting from self-attestation of cybersecurity implementation to independent validation by certified third-party assessors, which changes audit readiness, evidence quality expectations, and how suppliers get selected. Attendees will leave with a clear understanding of (1) what CAICO actually does and how it affects the credibility and consistency of CMMC assessments, (2) the CMMC credential pathways ISACA will administer and what each role is authorized to do, and (3) what ISACA professionals in audit, risk, governance, and security should know to help their organizations or clients prepare (scope, NIST SP 800-171 alignment, assessment artifacts, and vendor flowdown realities).