The Cyber AB has completed an investigation into a report submitted by a CCA regarding a potential violation by another CCA. They have determined…

The Cyber AB (now operating its credentialing arm as CAICO) follows a defined process for ethics and professional conduct violations. After a preliminary investigation confirms a potential violation falls under the purview of the Ethics and Professional Conduct Committee (functionally an "Industry Working Group" in this context), the Cyber AB's role is to refer the matter to that committee. The committee then undertakes a full review to determine a resolution. This resolution can range from remedial actions like coaching to severe penalties such as termination of credentials. The process explicitly includes a right of appeal for the accused party, ensuring due process.

A. The Cyber AB conducts the preliminary investigation but refers the matter to the specialized committee for final determination and resolution.

C. Immediate suspension is a severe measure reserved for cases posing an immediate threat, not a standard step upon referral to a committee.

D. The Cyber AB does not dismiss the case but ensures it is handled by the appropriate body, fulfilling its oversight responsibility.

---

1. Cybersecurity Assessor and Instructor Certification Organization (CAICO). (2023, August 22). Code of Professional Conduct (CoPC). Version 1.2. Section 5.2, "Investigation and Resolution," states, "If the CAICO determines that the alleged violation falls within the scope of the CAICO Ethics and Professional Conduct Committee’s (the “Committee”) authority, the CAICO will refer the matter to the Committee for resolution... The Committee may recommend... remediation, coaching, suspension, or termination... The Individual will have the right to appeal..."

2. The Cyber AB. (2023, August 22). Certified CMMC Assessor (CCA) Credentialing Handbook. Version 1.1. Section 8, "Ethics and Professional Conduct," p. 13, mandates that all certified individuals are "subject to the CAICO Code of Professional Conduct (CoPC) and its enforcement procedures." This reinforces that the process outlined in the CoPC is the governing authority for such scenarios.