{ "dataset_updated_on": "2026-10-03", "latest_observation_date": "2026-09-29", "scope": "Final and conditional CMMC Level 2 Certificates of CMMC Status and ecosystem headcounts; not unique companies, compliance rate or booking backlog", "certification_gap_model": { "planning_entities": 76598, "final_certificates": 2362, "gap_proxy": 74236, "units_caveat": "Planning entities minus system-scope certificates; capacity proxy only; July suspension means no fixed procurement deadline." }, "formulas": { "net_new_final": "current final_l2_certificates minus preceding reported final_l2_certificates", "trailing_3_month_average": "(200+239+257)/3 = 232", "trend_next_3_month_average": "OLS y=a+b*x on Apr-Sep net-new [124,193,275,200,239,257], x=[1,2,3,4,5,6]; a=141.86666666666667, b=20.8; mean predicted x=7,8,9 = 308.2666666666667", "hypothetical_3_person_team_throughput": "1179/3 = 393 per month if each hypothetical team finishes one assessment monthly; illustrative, not measured capacity" }, "rows": [ { "month": "2025-04", "final_l2_certificates": "85", "final_l2_reported_value": "85", "net_new_final": "", "conditional_l2": "4", "assessments_in_progress": "~100", "authorized_c3paos": "67", "ccas": "345", "lead_ccas": "", "source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-04-2025", "notes": "Pre-deduplication figure; not directly comparable to Aug 2025 onward", "primary_source_url": "", "secondary_source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-04-2025", "source_publication_date": "", "source_page": "", "verified_on": "", "c3pao_count_definition": "Authorized C3PAOs, as labeled in the retained historical dataset" }, { "month": "2025-05", "final_l2_certificates": "115+", "final_l2_reported_value": "115+", "net_new_final": "~30", "conditional_l2": "3-4", "assessments_in_progress": "~60", "authorized_c3paos": "70", "ccas": "364", "lead_ccas": "", "source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-05-2025", "notes": "Reported as over 115; pre-deduplication", "primary_source_url": "", "secondary_source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-05-2025", "source_publication_date": "", "source_page": "", "verified_on": "", "c3pao_count_definition": "Authorized C3PAOs, as labeled in the retained historical dataset" }, { "month": "2025-06", "final_l2_certificates": "168", "final_l2_reported_value": "158", "net_new_final": "53", "conditional_l2": "", "assessments_in_progress": "", "authorized_c3paos": "73", "ccas": "389", "lead_ccas": "266", "source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-06-2025", "notes": "RESTATED: July 2025 written record reported 158; later Cyber AB chart materials show 168; pre-deduplication", "primary_source_url": "", "secondary_source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-06-2025", "source_publication_date": "", "source_page": "", "verified_on": "", "c3pao_count_definition": "Authorized C3PAOs, as labeled in the retained historical dataset" }, { "month": "2025-07", "final_l2_certificates": "258", "final_l2_reported_value": "258", "net_new_final": "90", "conditional_l2": "", "assessments_in_progress": "87", "authorized_c3paos": "77", "ccas": "455", "lead_ccas": "300", "source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-07-2025", "notes": "Pre-deduplication; recap references DoD 80598 Level 2 estimate; C3PAO/CCA/Lead CCA from written town hall record", "primary_source_url": "", "secondary_source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-07-2025", "source_publication_date": "", "source_page": "", "verified_on": "", "c3pao_count_definition": "Authorized C3PAOs, as labeled in the retained historical dataset" }, { "month": "2025-08", "final_l2_certificates": "270", "final_l2_reported_value": "270", "net_new_final": "12", "conditional_l2": "9", "assessments_in_progress": "91", "authorized_c3paos": "79", "ccas": "496", "lead_ccas": "304", "source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-08-2025", "notes": "BASELINE: Cyber AB removed duplicate records from eMASS this month; net gain is net of deduplication", "primary_source_url": "", "secondary_source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-08-2025", "source_publication_date": "", "source_page": "", "verified_on": "", "c3pao_count_definition": "Authorized C3PAOs, as labeled in the retained historical dataset" }, { "month": "2025-09", "final_l2_certificates": "366", "final_l2_reported_value": "366", "net_new_final": "96", "conditional_l2": "16", "assessments_in_progress": "", "authorized_c3paos": "82", "ccas": "", "lead_ccas": "", "source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-09-2025", "notes": "", "primary_source_url": "", "secondary_source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-09-2025", "source_publication_date": "", "source_page": "", "verified_on": "", "c3pao_count_definition": "Authorized C3PAOs, as labeled in the retained historical dataset" }, { "month": "2025-10", "final_l2_certificates": "431", "final_l2_reported_value": "431", "net_new_final": "65", "conditional_l2": "21", "assessments_in_progress": "104", "authorized_c3paos": "83", "ccas": "567", "lead_ccas": "", "source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-10-2025", "notes": "", "primary_source_url": "", "secondary_source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-10-2025", "source_publication_date": "", "source_page": "", "verified_on": "", "c3pao_count_definition": "Authorized C3PAOs, as labeled in the retained historical dataset" }, { "month": "2025-11", "final_l2_certificates": "459", "final_l2_reported_value": "459", "net_new_final": "28", "conditional_l2": "", "assessments_in_progress": "", "authorized_c3paos": "88", "ccas": "623", "lead_ccas": "384", "source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-11-2025", "notes": "115 assessments pending SPRS affirmation reported; excluded from in-progress column (different measure); Lead CCA from official deck", "primary_source_url": "", "secondary_source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-11-2025", "source_publication_date": "", "source_page": "", "verified_on": "", "c3pao_count_definition": "Authorized C3PAOs, as labeled in the retained historical dataset" }, { "month": "2025-12", "final_l2_certificates": "559", "final_l2_reported_value": "559", "net_new_final": "100", "conditional_l2": "29", "assessments_in_progress": "115", "authorized_c3paos": "93", "ccas": "635", "lead_ccas": "377", "source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-12-2025", "notes": "Lead CCA dip to 377 attributed by Cyber AB to Marketplace renewal glitches since resolved", "primary_source_url": "", "secondary_source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-12-2025", "source_publication_date": "", "source_page": "", "verified_on": "", "c3pao_count_definition": "Authorized C3PAOs, as labeled in the retained historical dataset" }, { "month": "2026-01", "final_l2_certificates": "773", "final_l2_reported_value": "773", "net_new_final": "214", "conditional_l2": "34", "assessments_in_progress": "109", "authorized_c3paos": "97", "ccas": "688", "lead_ccas": "425", "source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-01-2026", "notes": "", "primary_source_url": "", "secondary_source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-01-2026", "source_publication_date": "", "source_page": "", "verified_on": "", "c3pao_count_definition": "Authorized C3PAOs, as labeled in the retained historical dataset" }, { "month": "2026-02", "final_l2_certificates": "896", "final_l2_reported_value": "896", "net_new_final": "123", "conditional_l2": "36", "assessments_in_progress": "110", "authorized_c3paos": "98", "ccas": "748", "lead_ccas": "452", "source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-02-2026", "notes": "", "primary_source_url": "", "secondary_source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-02-2026", "source_publication_date": "", "source_page": "", "verified_on": "", "c3pao_count_definition": "Authorized C3PAOs, as labeled in the retained historical dataset" }, { "month": "2026-03", "final_l2_certificates": "1074", "final_l2_reported_value": "1074", "net_new_final": "178", "conditional_l2": "39", "assessments_in_progress": "", "authorized_c3paos": "103", "ccas": "759", "lead_ccas": "", "source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-03-2026", "notes": "Conditional count from official deck; corroborated by Secureframe ecosystem analysis (Apr 2026) citing the March town hall", "primary_source_url": "", "secondary_source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-03-2026", "source_publication_date": "", "source_page": "", "verified_on": "", "c3pao_count_definition": "Authorized C3PAOs, as labeled in the retained historical dataset" }, { "month": "2026-04", "final_l2_certificates": "1198", "final_l2_reported_value": "1198", "net_new_final": "124", "conditional_l2": "42", "assessments_in_progress": "124", "authorized_c3paos": "103", "ccas": "766", "lead_ccas": "489", "source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-04-2026", "notes": "CCPs 1583; RPs 2110; RPOs 278 also reported", "primary_source_url": "", "secondary_source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-04-2026", "source_publication_date": "", "source_page": "", "verified_on": "", "c3pao_count_definition": "Authorized C3PAOs, as labeled in the retained historical dataset" }, { "month": "2026-05", "final_l2_certificates": "1391", "final_l2_reported_value": "1391", "net_new_final": "193", "conditional_l2": "47", "assessments_in_progress": "140", "authorized_c3paos": "", "ccas": "", "lead_ccas": "", "source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-05-2026", "notes": "C3PAO and CCA figures presented in slide images only; pending extraction", "primary_source_url": "", "secondary_source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-05-2026", "source_publication_date": "", "source_page": "", "verified_on": "", "c3pao_count_definition": "Authorized C3PAOs, as labeled in the retained historical dataset" }, { "month": "2026-06", "final_l2_certificates": "1666", "final_l2_reported_value": "1666", "net_new_final": "275", "conditional_l2": "", "assessments_in_progress": "", "authorized_c3paos": "107", "ccas": "1013", "lead_ccas": "596", "source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-06-2026", "notes": "CHART-READ: final-certificate figure read from town hall certification growth chart pending written confirmation; C3PAO/CCA/Lead figures confirmed in written record; October 3 audit: June CCA count refined from 1000+ to 1013 using the July 28 primary deck June comparison column; June final count retains original chart-read qualification; no June conditional or in-progress count inferred.", "primary_source_url": "https://cyberab.org/DesktopModules/EasyDNNNews/DocumentDownload.ashx?portalid=0&moduleid=1100&articleid=181&documentid=72", "secondary_source_url": "https://www.cmmc.com/newsroom/cyber-ab-town-hall-06-2026", "source_publication_date": "2026-07-28", "source_page": "9 (June comparison column; verifies CCA, C3PAO and Lead CCA only)", "verified_on": "2026-10-03", "c3pao_count_definition": "Authorized C3PAOs, as labeled in the retained historical dataset" }, { "month": "2026-07", "final_l2_certificates": "1866", "final_l2_reported_value": "1866", "net_new_final": "200", "conditional_l2": "58", "assessments_in_progress": "168", "authorized_c3paos": "111", "ccas": "1082", "lead_ccas": "637", "source_url": "https://cyberab.org/DesktopModules/EasyDNNNews/DocumentDownload.ashx?portalid=0&moduleid=1100&articleid=181&documentid=72", "notes": "Primary-deck values. Legacy authorized_c3paos field contains combined Authorized or Accredited C3PAOs as expressly labeled by the source; not applicant C3PAOs. Certificate counts are assessment-scope counts, not unique companies.", "primary_source_url": "https://cyberab.org/DesktopModules/EasyDNNNews/DocumentDownload.ashx?portalid=0&moduleid=1100&articleid=181&documentid=72", "secondary_source_url": "", "source_publication_date": "2026-07-28", "source_page": "8 (certification status); 9 (ecosystem)", "verified_on": "2026-10-03", "c3pao_count_definition": "Authorized or Accredited C3PAOs" }, { "month": "2026-08", "final_l2_certificates": "2105", "final_l2_reported_value": "2105", "net_new_final": "239", "conditional_l2": "66", "assessments_in_progress": "159", "authorized_c3paos": "113", "ccas": "1130", "lead_ccas": "659", "source_url": "https://cyberab.org/DesktopModules/EasyDNNNews/DocumentDownload.ashx?portalid=0&moduleid=1100&articleid=185&documentid=73", "notes": "Primary-deck values. Legacy authorized_c3paos field contains combined Authorized or Accredited C3PAOs as expressly labeled by the source; not applicant C3PAOs. Certificate counts are assessment-scope counts, not unique companies.", "primary_source_url": "https://cyberab.org/DesktopModules/EasyDNNNews/DocumentDownload.ashx?portalid=0&moduleid=1100&articleid=185&documentid=73", "secondary_source_url": "", "source_publication_date": "2026-08-25", "source_page": "12 (certification status); 13 (ecosystem)", "verified_on": "2026-10-03", "c3pao_count_definition": "Authorized or Accredited C3PAOs" }, { "month": "2026-09", "final_l2_certificates": "2362", "final_l2_reported_value": "2362", "net_new_final": "257", "conditional_l2": "71", "assessments_in_progress": "151", "authorized_c3paos": "117", "ccas": "1179", "lead_ccas": "681", "source_url": "https://cyberab.org/DesktopModules/EasyDNNNews/DocumentDownload.ashx?portalid=0&moduleid=1100&articleid=188&documentid=75", "notes": "Primary-deck values. Legacy authorized_c3paos field contains combined Authorized or Accredited C3PAOs as expressly labeled by the source; not applicant C3PAOs. Certificate counts are assessment-scope counts, not unique companies.", "primary_source_url": "https://cyberab.org/DesktopModules/EasyDNNNews/DocumentDownload.ashx?portalid=0&moduleid=1100&articleid=188&documentid=75", "secondary_source_url": "", "source_publication_date": "2026-09-29", "source_page": "19 (certification status); 20 (ecosystem)", "verified_on": "2026-10-03", "c3pao_count_definition": "Authorized or Accredited C3PAOs" } ] }