Cybersecurity Risk Assessment and Management Certificate

This certificate-focused training is designed to help teams understand cybersecurity risk assessment, control implementation, compliance evidence, and audit readiness. The related pathway covers CMMC, NIST 800-171, ISO 27001, SOC 2, and data privacy concepts, with AI Workbench support for drafting SSP sections, POA&M entries, incident response runbooks, and other audit-facing artifacts.

The pathway is built for CISOs, IT directors, compliance officers, program managers, defense contractors, prime and subcontractor suppliers, and DIB companies subject to DFARS and CMMC requirements. It is especially relevant for organizations handling Controlled Unclassified Information and preparing for CMMC assessments, ISO 27001 certification work, or SOC 2 audit readiness.

The cybersecurity pathway is listed as a pilot cohort opening in Q3 2026. Related components include self-paced online training and demo availability Tuesday through Thursday, 10am–4pm PST. Early-access pricing is available for the first five buyers on the CMMC and NIST 800-171 pilot cohort, with pathway pricing provided upon demo request.

Yes. The CMMC course helps defense contractors understand CMMC Level 2 requirements, security controls, compliance obligations, and audit readiness. The broader pathway also incorporates NIST 800-171 control families, gap assessment methodology, SSP development, POA&M management, C3PAO assessment preparation, and DFARS clause flow-down requirements.

The NIST 800-171 course teaches organizations handling Controlled Unclassified Information how to implement required cybersecurity controls, strengthen compliance, and prepare for CMMC and government contract requirements. The pathway expands this with all 14 control families, system security plan development, POA&M management, and evidence-building activities designed for audit readiness.

The QMS Workbench is trained on NIST SP 800-171, CMMC Level 1/2/3 assessment guides, ISO 27001 Annex A, and DFARS clause flow-down requirements. It supports practical tasks such as drafting SSP sections, building POA&M entries, and generating incident response runbooks, helping learners move from knowledge to usable compliance artifacts.

The Manager Dashboard provides visibility into learner progress, capability gaps, exam outcomes, completed scenarios, and activity records. These records can support objective evidence needs by showing who completed training, what artifacts were generated, and where teams may still need reinforcement before an external audit or assessment.

Pricing is available upon demo request, with early-access pricing noted for the first five buyers of the CMMC and NIST 800-171 pilot cohort. QMS Learning also offers team licensing and provides pricing tailored to team needs after a 30-minute demo, typically with details supplied within 24 hours when applicable.