A defined pathway from Security+ to Lead CCA — delivered under four authorized training designations. Every credential credits the next. No urgency theater, just a clear route into the one category of the workforce the market structurally cannot supply fast enough.
LEAD CCAs
452
nationally, Feb 2026
NEEDED BY 2028
1,500+
Cyber AB projection
DIB UNCERTIFIED
80K+
need Level 2
CERTIFIED TODAY
< 900
hold final Level 2
Four Authorized Training Designations — One Pathway
CAICO Authorized
CCP · CCA · Lead CCA
ISACA ATO
CISA · CISM · CRISC
CompTIA ATP
Security+ · CySA+ · CASP+
PECB Partner
ISO 27001 · ISO 42001
The Market State
Three things are true at the same time — and together they explain why starting now, even if your contract doesn't require CMMC yet, is the rational decision.
I · THE MANDATE
II · THE GAP
III · THE STANDARD
Entry Points
Every pathway on this page credits the next — no credential is wasted. Pick the entry point that matches your current state to see the defined route to Lead CCA.
Pathway A · From Zero
Full pathway investment
$17,365
Step 1 · Foundation
Security+ Prep
Step 2 · Core Credential
CCP Certification Prep
Step 3 · Assessor Credential
CCA Certification Prep
Step 4 · Bridge
CISA / CISM Prep
Step 5 · Capstone
Lead CCA Workshop
Outcome
Final determination authority on any C3PAO assessment.
Pathway B · Security+ Holder
Full pathway investment
$16,470
Step 1 · Implementation Track
Implementation Bootcamp
Step 2 · Assessor Track
CCP Cert Prep
Step 3 · Assessor Credential
CCA Certification Prep
Step 4 · Bridge
CISA / CISM Prep
Step 5 · Capstone
Lead CCA Workshop
Outcome
Implementation expertise or assessor authority — your choice.
Pathway C · CCP Holder
Full pathway investment
$9,985
Step 1 · Assessor Credential
CCA Certification Prep
Step 2 · Bridge
CISA / CISM Prep
Step 3 · Capstone
Lead CCA Workshop
Outcome
Final determination authority — 6 to 9 months from enrollment.
Not sure where you fit? Take the 5-minute pathway assessment →
The Economic Case
Lead CCA is the final determination authority on every C3PAO assessment. No C3PAO operates without one. This creates a permanent bottleneck — and a career category the market structurally cannot supply fast enough.
Every time a defense contractor undergoes a Level 2 C3PAO assessment, a Lead CCA signs the final determination. That signature is the credential's economic moat. There are 452 Lead CCAs in the country. Projected demand by 2028 exceeds 1,500 — and the Tier 3 background check alone adds 6 to 8 months to the pipeline.
You don't need to start at the top. You need to start on the pathway. Every credential credits the next.
The prerequisites compound naturally. CCA plus CISA or CISM plus active experience — each credential on the pathway is independently valuable, and each one reduces the pool of practitioners who can reach Lead CCA. By the time you arrive at the final workshop, you're one of the few hundred practitioners nationally who can sign C3PAO assessments as final determination authority.
This is not a job. It is a credential category the market cannot supply fast enough, protected against AI displacement because it requires credentialed human judgment, backed by the largest employer pool in cybersecurity — the entire defense industrial base in forced migration toward the requirement.
For Employers
Training existing staff is 10× more capital-efficient than hiring credentialed practitioners at market rates. Divergence Academy delivers cohort training with air-gapped and dedicated cohort options for primes, C3PAOs, MSPs, and regulated industries.
Air-gapped delivery, dedicated cohorts, and custom pacing are available for sensitive employers. Cohort pricing scales favorably above the base student count.
Training ten staff across CCP and CCA ≈ $114K in tuition. Hiring ten credentialed practitioners at market rates ≈ $2M+ in first-year comp, plus 3–6 month timelines. The comparison is not close.
Internal training builds retention. Open-market CMMC practitioners are actively recruited by C3PAOs, MSPs, and primes. A cohort trained inside your business is significantly stickier than an outside hire.
Cohorts
Evaluating a cohort for your team? Start with a 30-minute planning call.
Why This Program
A partnership model backed by public-institution legitimacy, four authorized training designations covering every credential on the pathway, and an AI-augmented curriculum built for the 2027 compliance landscape — not the 2024 one.
11+ years of instructor-led training. Continuing-education partnerships with public institutions. A shared-services model that keeps costs predictable across every credential.
Institutional partnership · Public-sector backed
CAICO for CCP, CCA, and Lead CCA. ISACA ATO for CISA and CISM — required for Lead CCA. CompTIA ATP for Security+ and CySA+. PECB for ISO 27001 and ISO 42001. No other DFW provider holds all four.
CAICO · ISACA · CompTIA · PECB
Training built on a knowledge substrate that updates as the framework and threat landscape evolve. Graduates are prepared for the Mythos-era compliance environment — framework literacy plus AI fluency. Static CATM courseware alone cannot match this.
Continuous updates · No repurchase
Questions We Hear Most
Start the Pathway
12–18 months end to end. Phase 2 enforcement arrives November 2026. The rational decision is to start now — on the pathway that fits where you're starting from.
Individual Enrollment
Monthly CCP cohorts, quarterly CCA. Enter the pathway at any credential.
Employer Cohorts
Dedicated, air-gapped, and custom-paced options available.