- What You Actually Pay: The Core Exam Fee
- Member vs. Non-Member Pricing
- Test Center vs. Remote Proctoring
- The Line Items Outside the Exam Fee
- Where Your Prep Dollars Should Go, Domain by Domain
- Three Budget Scenarios Compared
- Getting Your Employer to Pay
- Weighing the Fee Against the Career Case
- Frequently Asked Questions
- ISACA's current page lists US$575 for members and US$760 for non-members for the CMMC Certified Professional exam.
- The exam is computer-based, offered at authorized PSI test centers or through remote proctoring.
- Scheduling may be available 48 hours after payment, so budget time as well as money.
- Domain 4 (35%) and Domain 5 (25%) deserve the largest share of your prep spend.
What You Actually Pay: The Core Exam Fee
The sticker price is the easiest part of the cost picture. According to the current ISACA credential page, the CMMC Certified Professional exam fee is US$575 for ISACA members and US$760 for non-members. ISACA's current outline titles the credential "Certified CMMC Professional," and ISACA states it serves as the official CAICO for the program. If you see the older "CMMC Certified Professional (CCP)" naming in job postings or forum threads, it refers to the same credential.
One caution before you build a spreadsheet: fees change. Always confirm the figure on the official ISACA credential page before paying, because third-party blogs (including this one) can lag behind a price update. This guide treats the two numbers above as the baseline and focuses on everything that surrounds them.
Member vs. Non-Member Pricing
The gap between the two tiers is US$185 (US$760 minus US$575). Whether membership pays for itself depends on a number you should check directly on ISACA's site: the current membership dues. If the dues are lower than the savings, joining first is a simple win on the exam alone, before you count any other member benefits. If the dues exceed US$185, you would need other reasons to join, such as ongoing access to resources or community, to justify it.
| Tier | Exam Fee (per ISACA page) | Difference |
|---|---|---|
| ISACA member | US$575 | Baseline |
| Non-member | US$760 | US$185 higher |
Because pricing and membership terms are set by ISACA, run the math with the current dues figure before you pay. A quick comparison takes five minutes and can save you a meaningful amount.
Test Center vs. Remote Proctoring
The exam is computer-based testing (CBT). You can sit it at an authorized PSI test center or take it through remote proctoring. The published exam fee does not change based on that choice according to the information we verified, but the real-world costs around it do.
Test center considerations
- Travel time, fuel or transit costs, and possibly parking.
- A controlled environment with no need to worry about your home network.
- Possible limits on seat availability in smaller markets, which can push you to a farther location.
Remote proctoring considerations
- No travel, but you need a compliant room, a working webcam and a stable connection.
- Check-in requirements can be strict; a failed system check on exam day is a scheduling headache.
- Time zone and appointment availability may be more flexible than local test center calendars.
Scheduling may become available 48 hours after payment, so if you have a hard deadline (an employer requirement, a client assessment kickoff), pay early enough that the 48-hour window plus appointment availability does not squeeze you. For more on timing, see CCP exam dates, testing windows and scheduling.
The Line Items Outside the Exam Fee
The exam fee is rarely your total cost. Here is what to account for, and where we deliberately do not quote numbers because they depend on your choices or on details you must verify:
- Study materials. The official outline is free to read. Paid books, courses and practice tests are optional and vary widely in price.
- Source documents. A large part of the exam asks you to apply CMMC source and supplementary documents. Many of these are publicly available, which keeps this line item low for disciplined self-studiers.
- Practice testing. Quality practice questions are the most cost-effective way to test application skills. You can start with the CCP practice test to see where you stand before committing to paid courses.
- Retake and reschedule fees. Confirm current policies in the candidate guide. Do not assume a free retake.
- Renewal and maintenance. Validity and renewal rules must be verified in the current ISACA candidate guide, so treat any long-term cost projection as incomplete until you read it.
- Your time. The exam has 170 questions across six domains. Time off work or lost evenings is a real cost, even if it never shows up on a receipt.
Where Your Prep Dollars Should Go, Domain by Domain
If you are paying for study resources, spend in proportion to exam weight and your own weakness. The weighting below comes from the published outline.
Domain 4: CMMC Model Construct and Implementation Evaluation (35%)
The heaviest domain and the best place to invest. It covers applying source documents to evaluate practices (at minimum Level 1 practices), applying assessment criteria and methodology, and analyzing evidence location, collection, quality and use.
- Prioritize practice questions that force you to judge whether evidence is sufficient.
- Spend on resources that walk through practice-by-practice evaluation, not just definitions.
Domain 5: CMMC Assessment Process (CAP) (25%)
Covers CCP roles across Phase 1 (Plan and Prepare), Phase 2 (Conduct), Phase 3 (Report) and Phase 4 (evaluation of outstanding POA&M items), including scenario-based Level 2 assessment phases and steps.
- Scenario practice is worth paying for here because questions test sequence and role boundaries.
- Map each phase to who does what; a one-page phase chart is a free and effective tool.
Domain 3: CMMC Governance and Source Documents (15%) and Domain 6: Scoping (15%)
Domain 3 covers FCI and CUI in nonfederal unclassified networks, roles and authority, and source and supplementary documents. Domain 6 covers high-level CAP scoping and analyzing the environment to scope FCI assets.
- Mostly reading-driven and inexpensive to prepare for using public documents.
- Scoping rewards worked examples, so a few good scenario questions go further than a long textbook.
Domains 1 and 2 (5% each)
Domain 1 compares the roles, responsibilities and requirements of ecosystem authorities. Domain 2 applies the CMMC-AB Code of Professional Conduct principles along with ISO/IEC and DoW requirements.
- Low weight, so low spend. Free reading plus a handful of practice questions is usually enough.
- Do not ignore them entirely; ethics questions are often easy points if you have read the code.
For a full walkthrough of what each area tests, read our complete guide to all six CCP exam domains. If you are weighing how much the exam will stretch you before buying resources, how hard the CCP exam is gives a realistic view.
Three Budget Scenarios Compared
The scenarios below describe spending strategies rather than exact totals, since third-party resource prices vary and we do not want to invent figures. Each starts from the same fixed anchor: the ISACA exam fee.
| Approach | What You Buy | Best For | Main Risk |
|---|---|---|---|
| Lean self-study | Exam fee, free official outline and public source documents, practice tests | Candidates with prior CMMC, NIST or assessment exposure | Gaps in Domain 4 evidence judgment go unnoticed |
| Guided prep | Exam fee, a structured course or training program, practice tests | Career changers new to the ecosystem | Paying for content that overlaps free materials |
| Employer-funded | Exam fee and training covered by an organization | Consultants and assessor-track staff at firms | Repayment or retention terms attached to funding |
A sensible middle path for many people: read the official outline and source documents for free, take a diagnostic practice test, then spend selectively on whichever domain scores lowest. Our CCP study guide lays out a full plan, and the CCP training overview helps you judge whether a paid course is worth it for your background.
One scheduling idea tied to cost
Because failing and retaking is the single biggest avoidable expense, structure your prep so you reach the exam ready rather than hopeful. A simple domain-ordered plan works well:
Foundation (Domains 1, 2, 3)
- Read the ecosystem roles, the Code of Professional Conduct and the FCI/CUI source documents.
- These are cheap, low-friction points that build vocabulary for everything else.
Core Evaluation (Domain 4)
- Work through practice-level evaluation and evidence-quality scenarios.
- Spend the most practice-question time here because it carries 35% of the exam.
Process and Scoping (Domains 5, 6)
- Drill the four assessment phases and CCP role boundaries.
- Practice scoping FCI assets in short scenarios.
Getting Your Employer to Pay
CMMC work is driven by contract requirements, which gives you a stronger funding argument than most certifications. Organizations in the defense industrial base and the firms that support them often need qualified people for assessment preparation and readiness work. When you ask your employer to cover the exam fee, frame the request around concrete business needs rather than personal development:
- Name the contracts or clients where CMMC readiness matters to your organization.
- Point out that the credential is issued through ISACA, an established credentialing body, and that the exam covers assessment process, scoping and evidence evaluation.
- Offer to share what you learn with colleagues so the investment benefits the team.
- Ask about the exam fee, practice resources and study time as a single package, and clarify whether any retention or repayment terms apply.
If you are exploring where this credential can lead, our overview of CCP jobs shows the types of employers and roles that look for it.
Weighing the Fee Against the Career Case
A US$575 or US$760 fee is modest compared with many professional certifications, but cost only matters relative to return. We will not quote salary figures here, because any number we gave would risk being unverified or borrowed from another credential. Instead, use these questions to judge value for your situation:
- Do the roles you want list the credential, or a CMMC-related qualification, as required or preferred?
- Does your employer or a target employer support defense contractors who must meet CMMC requirements?
- Would the structured knowledge in the six domains close a real gap in your current work?
For a deeper treatment, see our analysis of whether the CCP is worth it and our salary guide, which explains how to research earnings responsibly. And if you want an honest read on your readiness before paying anything, a few sessions with the CCP practice tests will show whether your first-attempt odds justify booking now or studying longer.
Key Takeaway
Treat the ISACA fee as the smallest part of your risk. The expensive mistake is paying for an attempt before you are ready. Test yourself first, aim extra prep at Domains 4 and 5, and verify retake and renewal rules in the candidate guide before you pay.
Frequently Asked Questions
ISACA's current credential page lists US$575 for members and US$760 for non-members. Confirm the figure on the official page before paying, since fees can change.
No. Plan for any study materials or courses you choose, possible travel for a test center, and potential retake or renewal costs. Retake and renewal specifics must be checked in the current ISACA candidate guide.
The exam is computer-based and can be taken at an authorized PSI test center or through remote proctoring. Remote delivery requires meeting the proctoring technical and room requirements.
Scheduling may be available 48 hours after payment. Factor that in, plus appointment availability, if you are working toward a deadline. See our exam dates and scheduling guide for planning tips.
The pass rate is not publicly disclosed, so budget conservatively and prepare thoroughly rather than assuming a retake will be unnecessary. Our CCP pass rate article explains what is and is not known.