In August 2022, the Cyber Accreditation Body (AB) announced that Voluntary Assessments of Organizations Seeking Certification (OSCs) would begin under the authority of the DoD’s Joint Surveillance Program. Under this program, an approved CMMC Third-Party Assessment Organization (C3PAO) conducts the assessment in coordination with the Defense Industrial Base Cybersecurity Assessment Center (DIBCAC). As of this writing, three of these assessments have been conducted (although not finalized) and information on how the assessments have been going is making its way into the CMMC ecosystem.