Search results

Hi disel56, I can absolutely understand how stressful this must be for you; unsure if you will pass the audit. Fortunately, according to a presentation given last May by Ms. Katie Arrington, the Chief Information Security Officer, Office of the Under Secretary of Defense for Acquisition and...

Disel56, Long story short? Yes, you do. Every government contractor needs to be CMMC certified. The great thing, however, about CMMC vs former requirements and regulations is that there are different Maturity Levels (ML), 1-5. They build on each other so ML1 is the easiest to achieve while...

Hi Primesub, When you receive the contract, it will let you know what CMMC ML you will need to achieve. Unfortunately, from what we understand right now, there's not really any way to know before you receive the contract; however, if you have several contracts and you produce, transmit, store...

Unfortunately, it is a necessary evil. The self-certifying just hasn't been working and small businesses have been a prime target for hackers BECAUSE they often lack the cybersecurity necessary to keep their data safe. This is especially true of government contractors. Also, the CMMC site...

If you are NIST SP 800-53 compliant, you will be pretty far along, and it most likely won't take much to attain Maturity Level (ML) 5. However, there are going to be some differences. If you have questions about what it will take to reach ML 5, schedule a free consultation with Craig by...

Unfortunately, as you probably already know, the cost of an audit has not yet been released; that being said, based on other audits of similar scope and scale, our best ESTIMATE is anywhere between $20,000 to $30,000. HOWEVER, according to the Under Secretary of Defense for Acquisition &...

That's a great question! Essentially, the CMMC takes the best practices of all of these requirements and rolls them into one, uniformed model. To be honest, there is a lot of overlapping, anyways, and it just makes sense to simplify them all: FAR Clause 52.204-21 NIST SP 800-171 Rev 1 Draft...

The answer to that question is... Kind of, yeah! Which to be honest, is going to take some getting used to because even though we know it was coming, we've done so much NIST compliance work, that it's still kind of strange... But I digress! The goal of CMMC is to simplify the cybersecurity...

Technically, no. According to the Office of the Under Secretary of Defense for Acquisition & Sustainment FAQ page, Q6, starting in June of this year (2020), you will not be rewarded contracts going forward, if you have not passed the audit. So, it sounds like while they are giving you a bit of...

FAQs regarding CMMC, provided by the Office of the Under Secretary of Defense forAcquisition & Sustainment

That's a great question! It has barely been out for an entire day, but it does seem to make sense by making the requirements graduated instead of one-size-fits-all. Additionally, it streamlines the requirements so that contractors know exactly where to go. Still, it is a lot of new...

Your are very welcome! We are glad you find it useful and please don't hesitate to let us know if you have have questions!