CMMC Workforce Readiness Accelerator
CMMC Awareness & Training
Prepare your CUI workforce for the national security responsibilities they hold. Get role-based learning, training tailored to your procedures, and managed follow-up with organized completion records.
Free, 30-minute assessment. Built around your workforce and responsibilities.
CMMC Workforce Readiness Accelerator
Training that connects learning to the work.
An awareness course is one part of an effective training program. People also need instruction that reflects their responsibilities, a clear route for questions and reporting, and follow-up when training is incomplete. GAVII Cybersecurity provides a fully managed CMMC training program to meet all AT domain controls.
Relevant instruction
Three common courses establish a shared foundation. Additional courses address the security responsibilities a person actually holds.
Managed follow-up
We coordinate enrollment, assignments, reminders and targeted training-gap remediation so your team can see what is complete and what still needs attention.
Organized evidence
Client-scoped records connect assigned learning to course versions, knowledge-check results, completion and unresolved exceptions.
Full AT Domain Coverage
Meets all CMMC Awareness & Training Requirements
Everyone on the client-approved roster authorized, or scheduled, to store, transmit or process controlled unclassified information (CUI) completes these three courses.
Security Risk Awareness and CUI Protection
Recognize the risks associated with your work and choose safe actions under your organization’s security policies, standards and procedures.
Role-Based Security Training
Understand assigned security duties, authority, approved procedures, records and escalation. Build the common foundation before taking additional duty-specific courses.
Insider Threat Awareness
Recognize potential insider-threat indicators in context. Report observable concerns through approved channels without investigating beyond your authority.
Included role-specific learning
The right depth for each assigned role.
The program includes eight additional courses. Learners receive the courses relevant to their approved responsibilities, after completing the corresponding common course. Each course has its own instruction, assessment and completion record.
Managers and security leaders
Security Risk Awareness for Managers addresses team activities, approvals, delegation and unresolved risks.
Management and Security Oversight develops decisions about access, exceptions, training gaps and accountable follow-through.
Insider Threat Awareness for Managers covers receiving concerns, factual documentation, appropriate escalation and limited sharing.
Systems and network administrators
Security Risk Awareness for Systems Administrators examines risks in privileged access, configuration, changes, monitoring and recovery.
Privileged Systems and Network Administration connects authorized procedures to verification, recovery decisions, escalation and restricted administrative records.
Other assigned security responsibilities
Security, Compliance and Incident Coordination covers security triage, evidence, incident handoffs and follow-through.
Personnel and Physical Security addresses personnel changes, access responsibilities, visitor handoffs and incomplete records.
Development, Engineering and Acquisition connects design changes, supplier review, verification findings and engineering records to assigned duties.
Delivered through CMMCiQ
Learning your people can return to.
Self-paced lessons combine narrated instruction, equivalent transcripts, knowledge checks and explanatory feedback. Downloadable guides provide optional reinforcement. Required instruction is part of the course itself; learners do not need to submit practical exercises.
We tailor relevant policy references, reporting routes and local examples to approved client inputs. Additional specialist instruction may still be needed where a person’s duties extend beyond the program’s coverage.
A consistent learning experience
Assigned courses and separate completion records keep common learning and role-specific training connected without treating one course as a substitute for another.
How we work together
From your training needs to a maintained program.
Start with the people, responsibilities and procedures the training must support. We agree the rollout after confirming your inputs, existing learning and any integration requirements.
- 01
Identify needs
Confirm the training roster, role groups, current learning, gaps and relevant service-provider responsibilities.
- 02
Customize and approve
Your team approves applicable policies, defined duties, reporting routes and insider-threat indicators. We connect them to the learning pathways.
- 03
Assign and deliver
Enroll learners in CMMCiQ, assign the common and applicable role courses, and coordinate reminders and follow-up.
- 04
Reconcile the records
Review results and exceptions, address training gaps, and organize agreed client-scoped completion exports.
- 05
Maintain the program
Manage agreed personnel and responsibility changes, refresh assignments and provide reporting for your training owner.
Working together
Managed delivery. Accountable client decisions.
The service brings instruction, administration and records together. Your organization remains responsible for approving its security requirements and making sure people can perform their assigned duties.
GAVII Cybersecurity manages
- Learning delivery and course assignments
- Enrollment, reminders and completion follow-up
- Targeted training-gap remediation
- Completion reconciliation and agreed evidence reporting
Your team approves and supports
- The roster, defined duties and named duty holders
- Current policies, reporting routes and indicators
- Participation and required local inputs
- Specialist learning and service-provider evidence handoffs
Annual packages
Managed CMMC Training Program Annual Rates
Every tier includes the three common courses, applicable role-specific courses and training-compliance management. Count the people who need training, not total company headcount. Select one tier and apply its annual rate to every training user.
Small teams
- Three common courses
- Assigned role-specific courses
- Managed enrollment and reminders
- Completion reconciliation and agreed reporting
Example: 25 users = $750 per year.
Growing teams
- Three common courses
- Assigned role-specific courses
- Managed enrollment and reminders
- Completion reconciliation and agreed reporting
Example: 50 users = $1,000 per year.
Larger workforces
- Three common courses
- Assigned role-specific courses
- Managed enrollment and reminders
- Completion reconciliation and agreed reporting
Example: 100 users = $1,000 per year.
These are annual prices in US dollars, not graduated pricing bands. For example, 26 users are billed at $20 each, or $520 annually. We confirm the roster, localization, specialist learning beyond the included courses and integration requirements during the assessment. The examples show arithmetic, not a client-specific proposal.
Before we talk
Questions about the program.
Does everyone in our company need the program?
The three common courses are assigned to the approved CUI-access roster, not automatically to every employee. We review managers, administrators, other duty holders, relevant contractors and external service providers against their actual responsibilities.
Can you customize the training to our organization?
Yes. Discovery identifies applicable policies, security duties, reporting routes, insider-threat indicators and local learning needs. Your designated owners approve those inputs before they become client-specific instruction. The assessment also identifies requirements outside the included course coverage.
Can we use our existing learning platform?
Standard delivery is through CMMCiQ, using TrainerCentral. Other arrangements require a review of integration, reporting, accessibility and data-access needs. We do not assume that every platform or export format is supported.
What records will we receive?
Agreed client-scoped exports connect the approved roster and assignments to course versions, attempts, knowledge-check scores, completion and exceptions. Approved organizational inputs and evidence of implementation remain part of your assessment preparation.
How does this support the CMMC AT requirements?
The curriculum maps to the nine assessment objectives across AT.L2-3.2.1, AT.L2-3.2.2 and AT.L2-3.2.3. Training contributes to awareness, assigned-duty preparation and insider-threat recognition and reporting. Completing courses does not by itself establish that every objective is met or guarantee certification.
Review the DoD CMMC Level 2 Assessment Guide for the assessment criteria.
What happens in the training needs assessment?
Bring your training or HR owner and a security, compliance or IT lead to a free, 30-minute call. We discuss approximate learner numbers, role groups, current training, gaps, customization and the date driving your need. Include a relevant service provider if they hold security duties. No sensitive documents are needed to book; keep CUI and detailed personnel or system records out of the booking form.
Build a training plan around your people.
A free, 30-minute conversation about your workforce, assigned duties and training needs.