What is an RP?

An RP is a “Registered Provider.” It is an individual or organization that has been registered with CISA as a provider of Cybersecurity Continuous Monitoring (CCM) services.

To become an RP in the CCM program, an individual or organization must meet the following requirements:

1. Be a U.S. citizen or a U.S. business entity.
2. Have the necessary capabilities, expertise, and resources to provide CCM services.
3. Have the necessary insurance coverage and professional liability coverage.
4. Agree to comply with the CCM program requirements and policies.
5. Have a valid Data Universal Numbering System (DUNS) number.
6. Have an active System for Award Management (SAM) registration.
7. Have an active Federal Service Desk (FSD) account.
8. Have an active Federal Virtual Training Environment (FedVTE) account.

In addition to these requirements, RPs must also complete the CCM RP registration process, which includes submitting an application and providing any required documentation to CISA. CISA will review the application and, if approved, will issue an RP agreement to the applicant.