CERTIFICATION PROGRAM

Certify your practice. Win more business

The Certified Managed Compliance Provider program gives your MSP the credential, the skills, and the platform mastery to deliver the governance, risk and compliance services your customers are already asking for.

See it from the learner's seat

Request enrollment

What The Certification Is

An organization-level designation for your MSP

The CMCP is awarded to your MSP as a business. It signals to every prospect and customer that your practice has been trained, tested, and verified to deliver compliance services using a structured, auditable methodology built on the Kaseya Compliance Manager platform.

01 DELIVERED VIA

Self-paced LMS-based program with gated assessments after every module

02 EARNED BY

Your organization — requires at least one user to complete and pass the full program

03 BUILT ON

Kaseya Compliance Manager, the platform your practice already uses or is investing in

04 EXPANDABLE

Add framework-specific, deep-dive modules as your customer base and practice grow

Core Certification · Modules 1–8

Eight progressive modules build your practice from the ground up — from compliance fundamentals and platform configuration through client delivery, reporting, and advanced multi-framework engagements. Every module is gated: you advance when you can prove you're ready.

GRC Foundations

Lead any compliance conversation with confidence: explain what GRC means, why customers care, and your role as their compliance partner.

Framework Scoping & Control Mapping

Scope any engagement accurately, map controls across frameworks, and build unified evidence strategies that serve multiple standards at once.

Compliance Manager Configuration

Configure Kaseya Compliance Manager for any client: activate frameworks, integrate your tool stack, set role-based access, and validate scans from day one.

Evidence Collection & Validation

Collect and package audit-ready evidence that meets auditor standards across automated outputs and manual collection so nothing gets kicked back.

POA&M Governance

Run a remediation-tracking program clients can see, understand, and act on — turning compliance gaps into a managed, accountable process.

Executive Reporting & Audit Readiness

Produce board-ready reports and auditor-accepted evidence packages to guide clients through the audit itself without surprises.

Delivery QA & Continuous Governance

Operate with consistent quality: detect drift between audit cycles, score your own delivery, and keep every client on track.

Advanced Framework Delivery

Handle the most complex engagements — multi-framework clients, CMMC and HIPAA nuances, overlapping evidence — with depth and precision.

The CMCP designation is awarded once all modules are complete and every certification gate is passed.

Go Further with Module X Sold Separately

Once you have earned your CMCP designation, each Module X lesson delivers practitioner-level mastery of a single framework — well beyond the core program's foundational coverage. Purchase individual lessons for the frameworks your customers need most.

X.1

CMMC Level 1

17 practices, FAR 52.204-21, SPRS scoring, self-assessment methodology.

X.2

CMMC Level 2

110 practices, NIST SP 800-171, C3PAO prep, CUI scoping, SSP development.

X.3

NIST CSF 2.0

All six core functions including Govern, profile development, gap analysis.

X.4

ISO/IEC 27001:2022

93 Annex A controls, ISMS clause structure, Statement of Applicability.

X.5

CIS Controls v8

18 Controls, 153 Safeguards, Implementation Groups 1–3, tool-stack alignment.

X.6

SOC 2 (Type I & II)

Trust Services Criteria, evidence sourcing, sampling standards, report interpretation.

X.7

HIPAA Security & Privacy

Required and addressable safeguards, ePHI detection, risk analysis, BAAs, breach notification.

Why Digital Hands

Digital Hands is a cybersecurity and risk-advisory firm specializing in managed security, Unified Security Posture Management, and comprehensive risk management services. We built the CMCP program after seeing what happens when MSPs deliver compliance without a structured foundation — inconsistent delivery, unhappy clients, and missed revenue.

CMCP is not a generic GRC course. It is purpose-built for MSPs in the Kaseya ecosystem, aligned to the Kaseya Compliance Manager platform, and designed by practitioners who deliver these services every day.

Ready to earn your CMCP designation?

The CMCP program is available exclusively through Digital Hands in partnership with Kaseya.

Enroll cmcp.digitalhands.com

Questions grcteam@digitalhands.com

Walk through the learner experience →