LOCK IN YOUR
The Cybersecurity Maturity Model Certification (CMMC) is a cybersecurity standard that DoD contractos will need before they can win a government contract. Don’t risk losing out on future opportunities due to a perceived “weaker” supply chain than another bidder. You must prepare now.
SHOULD YOU BEGIN PREPARING FOR CMMC?
According to CMMCab.org, “If your organization provides goods or services to the DoD it is currently required to meet DFARS regulations through compliance with NIST 800-171 guidance. Ensuring compliance with that current DFARS regulation has the benefit of easing compliance with CMMC when it is complete. We suggest organizations start preparation now.“
NAVIGATE THE HURDLES OF DOD REQUIREMENTS
A DETAILED ASSESSMENT
We assess if your company is currently meeting the technical and process maturity standards in CMMC.
We identify vulnerabilities and compliance gaps in CMMC and broader areas.
We set up a system to create a history of process maturity to not only satisfy CMMC, but also be prepared for a cyber event.
We implement the security controls and requirements in NIST SP 800-171.
We monitor and respond to security threats on your network with our Managed Threat Detection and Response services.
ABOUT THE CMMC LEVELS
- Level 1 – “Basic Cyber Hygiene” – In order to pass an audit for this level, the DoD contractor will need to implement 17 controls of NIST 800-171 rev1.
- Level 2 – “Intermediate Cyber Hygiene” – In order to pass an audit for this level, the DoD contractor will need to implement another 48 controls of NIST 800-171 rev1 plus 7 new “Other” controls.
- Level 3 – “Good Cyber Hygiene” – In order to pass an audit for this level, the DoD contractor will need to implement the final 45 controls of NIST 800-171 rev1 plus 14 new “Other” controls.
- Level 4 – “Proactive” – In order to pass an audit for this level, the DoD contractor will need to implement 13 controls of NIST 800-171 RevB plus 13 new “Other” controls
- Level 5 – “Advanced / Progressive” – In order to pass an audit for this level, the DoD contractor will need to implement the final 5 controls in NIST 800-171 RevB. plus 11 new “Other” controls
Our team of highly certified professionals have the extensive knowledge and experience implementing NIST and other frameworks’ cybersecurity controls to assess your standing as related to DFARS and CMMC Requirements.