Skip to the page content
Passes our checks

Cybersecurity Maturity Model Certification Accreditation Body I

EIN 84-4383200 · Oxon Hill, MD

Public records show a registered, tax-exempt organization in good standing.

LegitimacyPassesRegistration and standingFinancial healthGood89 out of 100GovernanceGood80 out of 100Impact evidenceDescribes programsHow well its results are evidenced

What it says it does

THE CMMC ACCREDITATION BODY IS AUTHORIZED BY THE US DEPARTMENT OF DEFENSE TO BE THE SOLE AUTHORITATIVE SOURCE FOR THE OPERATIONALIZATION OF CMMC ASSESSMENTS AND TRAINING WITH THE DOD CONTRACTOR COMMUNITY.THE CMMC-AB HAS ESTABLISHED OPERATIONS AND CREATED INITIAL TRAINING, LICENSING AND CERTIFICATION PROGRAMS IN SUPPORT OF THE DEFENSE INDUSTRIAL BASE (DIB). WE HAVE OPENED APPLICATIONS FOR ASSESSORS, REGISTERED PRACTITIONERS AND REGISTERED PROVIDER ORGANIZATIONS.

Income
$5.1 million
Spending
$4.3 million
Spent on programs
71%
Reserves
10.4 months of spending
Largest source of income
fees for its services, 95%
Employees
9
Volunteers
10
Highest pay
$368,517, ceo and director

Source: Form 990 for the year ending December 31, 2024, filed with the Internal Revenue Service. Rating method 2026.2. How we rate

Financial health

Good: 89 out of 100. Higher than 74% of charities in its peer group (international, $1m to $10m).

  • Reserves

    28 of 35

    Spendable reserves would cover 10.4 months of spending.

  • Debt

    16 of 20

    It owes 18% of what it owns.

  • Living within its means

    15 of 15

    Income exceeded spending by 16% of income.

  • Income trend

    15 of 15

    Income rose 45% on the year before.

  • Spending floor

    15 of 15

    71% of spending went to programs.

Source: Form 990 for the year ending December 31, 2024, filed with the Internal Revenue Service. Rating method 2026.2. How we rate

Governance

Good: 80 out of 100. Higher than 33% of charities in its peer group (international, $1m to $10m).

  • Independent board

    25 of 25

    8 of 9 voting board members are independent.

  • Conflict of interest policy

    15 of 15

    Has a written conflict of interest policy.

  • Whistleblower policy

    0 of 8

    Reports no written whistleblower policy.

  • Record keeping policy

    0 of 7

    Reports no written policy on keeping and destroying records.

  • Board minutes

    5 of 5

    Keeps minutes of board meetings.

  • Board sees the tax return

    10 of 10

    Gave the board a copy of this return before filing it.

  • Pay set independently

    0 of 5

    Reports no independent review process for its chief executive's pay.

  • Independent check of accounts

    15 of 15

    Its accounts were audited by an independent accountant.

  • No reported misuse

    10 of 10

    Reports no diversion of assets, excess benefits or loans to insiders.

Source: Form 990 for the year ending December 31, 2024, filed with the Internal Revenue Service. Rating method 2026.2. How we rate

Impact evidence

Describes programs. Its tax return describes what it does but we have found no measurable results in it.

Programs described in its return (3)
  1. $1.0 million spent. CMMC THIRD-PARTY ASSESSMENT ORGANIZATIONS
  2. $1.0 million spent. REGISTERED PRACTIONERS ARE AUTHORIZED TO USE CMMC-AB BRANDING IN THE COURSE OF PROVIDING NON-CERTIFIED SERVICES TO ORGANIZATIONS SEEKING CERTIFICATION.
  3. $1.0 million spent. CERTIFIED CMMC PROFESSIONALS AND CMMC ASSESSORS ARE TRAINED AND TESTED TO PROVIDE SERVICES TO ORGANIZATIONS SEEKING CERTIFICATION.

Source: Form 990 for the year ending December 31, 2024, filed with the Internal Revenue Service. Rating method 2026.2. How we rate

Legitimacy checks

  1. Is it registered with the IRS? Passed.

    Listed in the IRS master file of tax-exempt organizations as a 501(c)(3) charitable organization.

    Source: Exempt Organizations Business Master File, Internal Revenue Service, file dated October 13, 2026.

  2. Has the IRS revoked its tax-exempt status? Passed.

    Not on the IRS automatic revocation list.

    Source: Automatic revocation of exemption list, Internal Revenue Service, file dated November 6, 2026.

  3. Are donations tax-deductible? Passed.

    On the IRS list of organizations eligible to receive tax-deductible contributions.

    Source: Publication 78 data: organizations eligible for tax-deductible contributions, Internal Revenue Service, file dated October 13, 2026.

  4. Is it keeping up with its IRS filings? Worth knowing.

    The IRS does not require this organization to file annual returns.

    Source: Exempt Organizations Business Master File, Internal Revenue Service, file dated October 13, 2026.

  5. How long has it been tax-exempt? Passed.

    Recognized by the IRS since September 2021.

    Source: Exempt Organizations Business Master File, Internal Revenue Service, file dated October 13, 2026.

  6. Is it in good standing with state regulators? Passed.

    Not on California's list of charities barred from soliciting. Other states are not yet checked.

    Source: May Not Operate or Solicit for Charitable Purposes list, California Attorney General, Registry of Charities and Fundraisers, file dated November 4, 2026.

Ratings and checks are our reading of public records, using the published method. They are not a statement about anyone's honesty. If you work for this organization, you can send corrections or results, confirm you want gifts through Veridonate, or ask to be removed from giving.