A CMMC Third Party Assessor Organization (C3PAO) is a service provider authorized by the Cyber-AB to conduct CMMC assessments and submits findings and certify that Organizations Seeking Certification (OSCs) comply with the CMMC levels.
Registered Provider Organizations (RPO) provide pre-assessment consulting services to government contractors and other OSC and/or assist during assessments in the event a finding is identified.
