Retired military and former ISSO and have a few questions. I'm relatively new to Fedramp but am very versed in 800- series for RMF and CMMC/CUI systems.
I love the way Fedramp makes use of inheritance/reciprocity and think I would like to get in on the auditing side.
Would I be competitive for 3PAO roles with only DoD experience? Only hold CISSP now.
Would not having clearances hurt my chances? (expired)
Is there any training for 3PAO's other than what's on the Fedramp site?
Do 3PAO's do most of the auditing/assessment from the -53(a)?
[link] [comments]