ISACA Lead CMMC Certified Assessor
ISACA's lead-assessor CMMC credential, administered through ISACA's CAICO role, for senior assessors who plan, direct, and oversee full Cybersecurity Maturity Model Certification Level 2 assessments and hold final determination authority for Level 2 certifications. Unlike the CCP and CCA, it is earned through an experience-based application rather than an exam, and requires holding both of those certifications first. Note: the Department of War suspended CMMC Phase II third-party assessment requirements on 2026-07-13; the credential remains earnable, though near-term demand for lead assessors is affected while a reform review is underway.
What you'll prove
- Plan, direct, and oversee full CMMC Level 2 assessments
- Direct assessment teams on behalf of accredited C3PAOs
- Hold final determination authority for CMMC Level 2 certification decisions
Frequently asked
What does the CMMC Phase II suspension mean for the LCCA?
On 2026-07-13 the Department of War suspended CMMC Phase II third-party assessment requirements, originally scheduled for 2026-11-10. The LCCA leads the third-party assessment teams that Phase II would have driven, so its near-term demand is directly affected. Phase I self-assessments remain in force, a reform task force is due to report within about 60 days (around mid-September 2026), and the credential itself remains earnable while the program is reviewed.
Does the LCCA require an exam?
No. Unlike the CCP and CCA, the LCCA is application-based: you submit an application demonstrating the required experience and pay a $500 processing fee, with no written test. You must already hold active CCP and CCA certifications to apply.
What is the difference between the CCA and the LCCA?
The CCA is an exam-based assessor credential for conducting CMMC Level 2 assessments. The LCCA sits above it: it is application-based, requires both the CCP and CCA plus advanced 612 proficiency, and carries the authority to plan and direct full assessment teams and make final Level 2 certification determinations for accredited C3PAOs.