A Certified Third-Party Assessment Organization (C3PAO) will perform the assessment. The assessment will be performed by a certified accessor affiliated with the C3PAO and certified to the appropriate CMMC Level.