• ISACA CERTIFIED CMMC ASSESSOR (CCA) TRAINING

    Enroll in the inaugural Adodo CCA Training Course through a strategic alliance with Knight CICC, and learn how to prepare for your CCA exam from Dr. Tom Duffey (C|CISO, CISSP, CISA, CISM, CRISC, GCIP, LCCA, CCI, PMP), an ISACA APMG accredited trainer and respected cybersecurity and compliance leader with over 30 years of critical infrastructure protection and defense security experience.

    Dates: Nov. 2nd - 6th , 2026

    Celebrate Our ISACA GHC Partnership with DISCOUNT PRICING

    Contact Us: training@adodo.ai

CCA Course Overview: Advance to CMMC Assessor and earn 40 CPE Credits

Grow your place in the Defense Industrial Base (DIB) by mastering compliance assessment processes of mandatory protection for Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). This inaugural Cybersecurity Maturity Model Certification (CMMC) Certified Professional (CCP) course is offered by Adodo, a Cyber-AB CMMC Third Party Assessment Organization (C3PAO) and Authorized Training Provider (ATP), in partnership with Knight Critical Infrastructure Cybersecurity and Compliance (CICC). This course, taught by Dr. Tom Duffey, Knight CICC Principal, Consultant, Assessor/Auditor, and Instructor, an ISACA APMG accredited trainer, and a respected leader serving in multiple roles within the Houston security community, provides candidates with a deep, actionable understanding of the CMMC ecosystem, including required tools, techniques, and security requirements detailed in the Defense Federal Acquisition Regulation Supplement (DFARS) and National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171.

Designed specifically to prepare you for the rigorous CMMC CCA exam, this instructor-led training verifies your knowledge to perform effective CMMC Level 2 Certified Assessments for Organizations Seeking Certification (OSCs). The first phase of CMMC enforcement went active on November 10, 2025, mandating the implementation of critical protections, and in phase two defense contractors will be required to pass rigorous assessments to secure government contracts. Earning your CCP is the crucial first step in your CMMC journey. The official CCP training class and certification are also mandatory prerequisite for professionals seeking to advance to Certified CMMC Assessor (CCA), and/or Lead CCA (LCCA) certifications.

Note: The U.S. Department of Defense (DoD)/Department of War (DoW) is the authoritative source for CMMC documentation (https://www.acq.osd.mil/cmmc/documentation.html). 

Who Should Attend?

  • This comprehensive CCA certification preparation training builds on the CCP training and is critical for professionals spanning the compliance and cybersecurity spectrum at all levels, including but not limited to:
  • Executives and employees of Organizations Seeking CMMC Certification (OSC)
  • Prime and Subcontractors with current and future defense contracts involving the storage, transmission, and/or processing of Federal Contract Information (FCI) and Controlled Unclassified Information (CUI)
  • Information Technology (IT) and Operational Technology (OT) Cybersecurity Professionals at all levels
  • Regulatory Compliance Officers and Legal and Contract Compliance Professionals
  • Federal and Commercial Cybersecurity and Technology Consultants and Managers
  • Federal Employees and Contract Office Representatives (CORs)
  • Registered Practitioners (RPs) and Registered Practitioners Advanced (RPAs)
  • Candidate CMMC Assessment Team Members


Prerequisites

CCP candidates should have ALL of the following:
• Complete the official CCP Training Course
AND
• Three or more years of cybersecurity experience (Bachelor's degree, education, and/or related military or professional experience)
AND
• One or more years in assessment/audit experience
AND
• Hold
ONE current "Intermediate" or "Advanced" certification from the list below:

-Intermediate
• CompTIA Security+, Cloud+, CASP+, or PenTest+
• Mile2 CISSO
• ISC^2 CGRC/CAP
• GIAC GSEC or GCSA
• FITSP-A

-Advanced
• ISACA CISA or CISM
• CompTIA CySA+
• ISC^2 CISSP or CISSP-ISSEP
• GIAC GSLC or GSNA
• EC-Council CCISO

CAICO Blueprint Alignment

Official CMMC Assessor and Instructor Certification Organization (CAICO) 2022 Certified CMMC Assessor (CCA) Blueprint Alignment

The curriculum is strictly aligned with the official 2022 CAICO Certified CMMC Assessor (CCA) Blueprint, ensuring comprehensive coverage of the knowledge, skills, and competencies required to successfully prepare candidates for the Certified CMMC Assessor (CCA) certification examination. The course is structured to provide in-depth instruction across all weighted content domains while emphasizing practical application through real-world assessment scenarios and hands-on exercises.

    • Domain 1: Evaluating Organizations Seeking Certification (OSCs) Against CMMC Level 2 Requirements (15%)
    • Domain 2: CMMC Level 2 Assessment Scoping (20%)
    • Domain 3: CMMC Assessment Process (CAP) (25%)
    • Domain 4: Assessing CMMC Level 2 Practices (40%)

Houston, TX

Join us for the inaugural Certified CMMC Assessor (CCA) training at the Microsoft Corporate Office in Houston, Texas. This instructor-led course combines expert instruction, real-world assessment scenarios, and practical exercises to prepare candidates for the Certified CMMC Assessor (CCA) certification examination.

Remote attendees are also welcome!


Starting Monday, November 2nd, 2026

Dates

Monday to Friday

Nov. 2nd - Nov. 6th, 2026 

8:30 am to 4:30 pm CST

Location

Microsoft Corporate Office

750 Town & Country Blvd., Suite #1000

Houston, TX 77024

Meet Your Instructor

Dr. Tom Duffey

Lead Adodo / Knight CCA Instructor:


Dr. Tom, a respected leader in the Houston community, is a mechanical engineer, consultant, auditor, thought leader, project manager, instructor, and OT/IT cybersecurity and regulatory compliance professional with over 30 years of experience in the defense, energy, and healthcare sectors. Dr. Tom, the principal at Knight CICC, is a lead CCA and CMMC Certified Instructor (CCI).


His diverse experience includes both CONUS and OCONUS support for multiple U.S. military branches, and he spent over a decade as a defense contractor, including roles as an ISSO and DIACAP/DoD RMF Program Manager for a three-star global military command, before shifting his focus to industry. Along with his extensive defense background, Dr. Tom's diverse experience includes work in both commercial IT and OT environments, and he specializes in NIST, ISA/IEC, and ISO security frameworks, as well as CMMC, NERC CIP, TSA SD02, HIPAA, and the DoD RMF regulatory mandates. 

Dr. Tom's motto, to which he has adhered throughout his career and firmly believes, is to grow oneself, others, and the organization while giving back to the security community. He mentors others and has served in supporting board and leadership roles for ISA Houston, South Texas ISSA, ISACA GHC, and the InfraGard Energy CSC. Dr. Tom has also participated in various NERC efforts and currently serves as the Vice Chair of the NERC Supply Chain Subcommittee (SCS). 

In addition to extensive academic and professional credentials, Dr. Tom, the Adodo.ai lead CMMC assessor and instructor, holds multiple DoD 8570/8140 credentials. He is an ISACA-APMG-accredited instructor for CISA, CISM, and CRISC, which serve as prerequisites for CMMC certifications. Along with helping others, teaching and learning remain two of Dr. Tom's biggest passions, who currently serves as a Texas A&M Engineering Extension (TEEX) adjunct professor and an ISA/IEC 62443 OT cybersecurity course instructor. He leverages his background as a previous DIACAP/DoD PM to help students better understand how the CMMC CCP course material applies to protecting FCI and CUI, and ultimately, the men and women serving our country.

Along with his doctoral dissertation on NERC CIP regulatory compliance, Dr. Tom is a respected thought leader. He has contributed to numerous security thought-leadership efforts, including a World Economic Forum white paper on electric-industry cyber resilience and domain content for the EC-Council C|CISO certification Body of Knowledge. Outside of work, Dr. Tom also enjoys traveling and working on various projects. He and his wife also serve on the hospitality team for their local church.

Knight CICC

CRITICAL INFRASTRUCTURE CYBERSECURITY & COMPLIANCE

Protect - Consult - Audit - Train

Adodo is your mission-ready partner for DoD Cyber Compliance, dedicated to helping organizations navigate complex regulatory landscapes. We are an Authorized CMMC C3PAO and Authorized Training Provider (ATP). 

Phone: 202-656-3630
   hello@adodo.ai (C3PAO)

   training@adodo.ai (Training)

Enroll Today!

Course Curriculum