C3PAOs are authorized to conduct CMMC assessments across DIB companies’ unclassified networks. Following an assessment, the C3PAO issues the appropriate CMMC Certificate.