CMMC Level 2 Security Awareness: Common Core

CMMC Level 2 Security Awareness: Common Core is a self-paced online intermediate-level course from Petronella Technology Group, Inc. for every employee and contractor at an organization pursuing CMMC Level 2. It takes about 63 minutes, costs $49 per learner, ends with a dated certificate of completion valid for 12 months, and supports CMMC Level 2 practices AT.L2-3.2.1 (Role-Based Risk Awareness) and AT.L2-3.2.3 (Insider Threat Awareness).

Foundational CMMC Level 2 awareness for all roles: CUI, insider threat, phishing, passwords and MFA, physical security, and incident reporting. Maps to NIST 800-171 3.2.1 and 3.2.3.

⏲ 63 min★ intermediate➤ CMMC

Pricing

From $49

Lifetime access. Certificate of completion. Quizzes and assessments.

Enroll Now

Your Instructor

Craig Petronella

CMMC-RP, CCNA, CWNE, DFE #604180

Founder of Petronella Technology Group (founded 2002, BBB A+ since 2003). Team is fully CMMC-RP certified. CMMC-AB Registered Provider Organization #1449.

What you will learn

  • Explain why the Department of Defense requires CMMC and what DFARS 252.204-7012 asks of your organization (AT.L2-3.2.1)
  • Tell Federal Contract Information (FCI) apart from Controlled Unclassified Information (CUI) and read a CUI marking
  • Handle CUI safely in everyday work: approved channels, Limited Dissemination Controls, and when to ask before sharing
  • Recognize behavioral and technical insider-threat indicators and know where to report them (AT.L2-3.2.3)
  • Spot phishing, spear phishing, vishing, smishing and business email compromise before they land
  • Use passphrases and multi-factor authentication, follow clean-desk and removable-media rules, and report an incident correctly

CMMC practices this course supports

  • AT.L2-3.2.1 Role-Based Risk Awareness: the practice asks that managers, system administrators and users are made aware of the security risks of their activities and of the policies, standards and procedures that apply to them. This course maps to it.
  • AT.L2-3.2.3 Insider Threat Awareness: the practice asks that security awareness training covers recognizing and reporting potential indicators of insider threat. This course maps to it.

Each course ends with a final assessment passed at 80%, and a dated certificate of completion with a 12-month expiry is issued on pass. Anyone can check a certificate at https://petronellatech.com/training/verify/.

The courses support these practices; they do not by themselves make an organization compliant. A CMMC assessor evaluates your whole training program, including the completion records you keep.

Course outline: 8 lessons

  1. Why CMMC, and What Is CUI?
  2. CUI Deep Dive - Identify It, Mark It, Handle It, Report It
  3. Recognizing and Reporting Insider Threat
  4. Phishing and Social Engineering
  5. Passwords, Passphrases, and Multi-Factor Authentication
  6. Physical Security, Clean Desk, and Removable Media
  7. Incident Reporting - What, When, and to Whom
  8. Final Assessment - Pre-Quiz Summary

Buying for a team

CMMC Level 2 Awareness and Training License. The CMMC Level 2 Awareness and Training License costs $300 per user per year and covers all three CMMC Level 2 courses (Common Core, General Users and Executives) for each user with one enrollment code. It is sold for 1 to 500 users per order, and orders of 25 or more users can be paid by invoice. See the license.

Team packs for this course. A block of seats for this one course, redeemable for 12 months: 10 seats $290, 25 seats $625, 50 seats $999, 100 seats $1,499. Compare team packs.

Frequently Asked Questions

What will I learn in CMMC Level 2 Security Awareness: Common Core?

You will learn what Controlled Unclassified Information (CUI) is and why it matters, how to recognize and report insider threats, and how to spot phishing and social engineering. It also covers password and MFA hygiene, physical security, and incident reporting timelines.

Who is CMMC Level 2 Security Awareness: Common Core for?

It is the foundation course every member of a defense-contractor workforce takes before role-based training, so it is intended for all roles at organizations subject to CMMC Level 2. This intermediate CMMC Level 2 course maps to NIST 800-171 controls 3.2.1 and 3.2.3.

How long is CMMC Level 2 Security Awareness: Common Core and what level is it?

It is an intermediate-level course running about 63 minutes, roughly one hour. The course is self-paced and online with progress tracking.

Is CMMC Level 2 Security Awareness: Common Core free or paid?

It is a paid course; the current price is shown on this page and checkout is handled by Stripe. Access is granted as soon as payment completes. It is covered by our 30-day money-back guarantee: request a refund within 30 days of purchase if you have completed less than 25% of the course, and we refund the full price.

How do I pass and get the certificate?

Completion requires passing the 25-question final assessment at 80 percent, and a dated certificate of completion is issued on pass. The certificate is the dated completion evidence for the practices this course maps to, AT.L2-3.2.1 and AT.L2-3.2.3.

Does this course satisfy CMMC AT.L2-3.2.1 and AT.L2-3.2.3?

It is designed to support those practices: AT.L2-3.2.1 (Role-Based Risk Awareness) and AT.L2-3.2.3 (Insider Threat Awareness). No course satisfies a practice on its own: your CMMC assessor evaluates your whole training program, including the records you keep. Each learner can download a dated certificate of completion from their dashboard, anyone can check a certificate at https://petronellatech.com/training/verify/, and team buyers can export the roster, with completion dates and certificate numbers, as a CSV file.

How much does it cost for a team?

The CMMC Level 2 Awareness and Training License costs $300 per user per year and covers all three CMMC Level 2 courses (Common Core, General Users and Executives) for each user with one enrollment code. It is sold for 1 to 500 users per order, and orders of 25 or more users can be paid by invoice. Team packs for this course alone are 10 seats $290, 25 seats $625, 50 seats $999, 100 seats $1,499, with seats redeemable for 12 months. Both are on https://petronellatech.com/training/teams/, or call 919-348-4912.

How long is the certificate valid?

12 months. Each certificate carries its issue date and a 12-month expiry, so the record shows when the training was last completed.

Loading full course details, curriculum, and preview lessons. If this view does not change in a few seconds, please browse all courses or call 919-348-4912.