So, I am flagging this as “rumor” because I have sat on it for nearly two months trying to get confirmation, and just cannot. But the source is pretty well-placed, so it has some credibility. I just prefer to get a 2nd or 3rd confirmation before running it as a fact. Proceed with caution on this one.
The source tells me that the Cyber AB (formerly CMMC-AB), which is tasked with overseeing the CMMC program and accrediting C3PAO assessment organizations, is planning on disbanding entirely. Well, here’s the quote:
… AB will disband, shift its focus on CAICO. They are already talking to DOD about taking over accreditation of C3PAOs. DOD is thinking of putting the accreditation work out for multiple bids and using bodies like ANAB and A2LA which was a plan a while back anyway. This is why the AB never got ISO accredited and why the DOD hasn’t done anything about it. Leaders never could figure out accreditation and never had the appetite for it. They really rejected the idea they had to stop selling credentials to get 17011. But the AB is trying to sell as many credentials as they can before they split. CAICO will keep selling credentials but DOD is angry and has not promised they will honor any of them. A lot of people are going to be very mad and probably sue.
Make of that what you will.
Here’s the thing. It makes enough sense to sound entirely plausible. The AB has certainly ignored its obligation to get ISO 17011 by 2022, as required by the DoD contract.
Original contract between DoD and Cyber AB.
The Cyber AB has not joined the IAAC, has not implemented 17011, has not divested CAICO (as would be required), and has not reined in conflicts of interest. It also has not accredited a single C3PAO to ISO 170120, as required, since it cannot do that until it gets 17011 for itself.
So this makes a lot of sense. It also explains how the DoD could continue to let the AB brazenly violate a Federal government contract.
But because a theory makes sense doesn’t make it a fact.
But read that last sentence again. If the AB shuts down, even if it tries to shift its various badges over to the CAICO thing, this could open up huge lawsuits and a full-on fraud investigation. Because if this all comes to pass, it will have done so with the leadership of the AB having been fully complicit. They won’t be shutting down overnight because of some mishap. This will have been a planned thing, willful and intentional.
That’s fraud. Millions and millions of dollars worth of fraud.
Let’s see how this plays out.
Christopher Paris is the founder and VP Operations of Oxebridge. He has over 35 years’ experience implementing ISO 9001 and AS9100 systems, and helps establish certification and accreditation bodies with the ISO 17000 series. He is a vocal advocate for the development and use of standards from the point of view of actual users. He is the writer and artist of THE AUDITOR comic strip, and is currently writing the DR. CUBA pulp novel series. Visit www.drcuba.world
