Assessors do not award the certificates, nor does the CMMC-AB. The C3PAO is the one who issues the certificate. Assessors complete the assessment, send the reports to the C3PAO, who then uploads them to the CMMC-AB with the result. This must be done by an Authorized C3PAO and can be executed prior to the ISO certification being in place.