How Long Does a CMMC Assessment Take? – CT CMMC Coalition

Jim you are correct the C3PAO will need the ISO certification. This requirement came from the Department of Defense. Your timeline is also correctt (I believe).