CMMC Assessment Appeals Process

BomberJacket Networks is committed to impartial, transparent CMMC assessments. If your organization believes the assessment outcome was affected by malfeasance, unethical conduct, or assessor error, you have the right to formally appeal in accordance with ISO/IEC 17020 and 32 CFR §170.9.

(651) 448-9900

Eligible Grounds for Appeal

Appeals are accepted only on the following grounds. Dissatisfaction with a passing or failing score alone does not constitute grounds for appeal — the appeal must identify a specific procedural or conduct-based deficiency.

Malfeasance

Intentional misconduct, fraud, or deliberate wrongdoing by a member of the BNI assessment team that materially affected the assessment outcome.

Unethical Conduct

Violation of professional ethics standards, including undisclosed conflicts of interest, bias, or improper conduct during the assessment process.

Assessor Error

Erroneous interpretation of CMMC policy, doctrine, or assessment criteria that led to an incorrect determination on one or more assessment objectives.

Appeals Timeline

Submit Appeal

Within 14 calendar days of final out-brief

Acknowledgment

BNI acknowledges receipt within 3 business days

Reevaluation

Independent QA Officer (CCA) completes review within 21 calendar days

Final Decision

Written decision issued by BNI Director. CyberAB escalation available within 14 days if unsatisfied.

14-Day Deadline: Appeals must be submitted no later than 14 calendar days after the final out-brief conducted by the BNI assessment team. Appeals received after this deadline will not be considered.

What Your Submission Must Include

To be considered, your appeal must include all of the following:

1
First and last name of the appellant point of contact
2
Full legal name of the appellant organization (OSC)
3
Email address and telephone number of the appellant point of contact
4
The CMMC Assessment ID and date of assessment
5
The date of the final out-brief conducted by the BNI assessment team
6
The specific assessment objective(s) being disputed
7
A statement describing the basis of the appeal, including the grievance and any claims of improper procedure or erroneous interpretation of policy
8
Description of any steps taken to resolve the matter prior to submitting the appeal
9
Reference to or description of any written notification of the decision being appealed

Appeal Intake Form

Complete all required fields. Fields marked with a red asterisk are required.

Appellant Contact Information

First Name *

Last Name *

Job Title

OSC Full Legal Name *

Email Address *

Phone Number *

Assessment Details

CMMC Assessment ID *

Assessment Date *

Date of Final Out-Brief *

The 14-day appeal window begins on this date.

Basis for Appeal *

Select all that apply. At least one is required.

Malfeasance

Intentional misconduct or wrongdoing by an assessor

Unethical Conduct

Violation of professional ethics or conflicts of interest

Assessor Error

Erroneous interpretation of policy, doctrine, or assessment criteria

Specific Assessment Objective(s) Being Disputed

If multiple objectives are disputed, list each on a separate line.

Statement of the Basis for Appeal *

Steps Taken to Resolve the Matter Prior to This Appeal *

Reference to Written Decision or Notification

Certification of Accuracy: I certify that the information provided in this appeal submission is true, accurate, and complete to the best of my knowledge. I understand that submitting false or misleading information may result in dismissal of this appeal.

Your submission will be received by the BNI Appeals Review Officer.

CyberAB Escalation

If your organization is not satisfied with BomberJacket Networks' final appeal decision, you may escalate your appeal to the CMMC Accreditation Body (CyberAB) at appeals@cyberab.org within 14 calendar days of receipt of BNI's decision letter. Your submission to CyberAB must include a copy of BNI's decision letter, your original appeal, and all supporting documentation.