Choose how much of the work you want us to do, from done for you to do it yourself.
Done for you consulting covers the full program. The enclave services cover the technology that holds your CUI. The policy package and the DIY course give your team the documents and training to run the program in house.
The first step, and a finished piece of your program.
Our team assesses your systems, documents and practices against CMMC Level 2, on site or remotely. You get an accurate picture of where you stand and a project plan to close every gap.
We also deliver a first set of policies and procedures, so you finish with part of your program done and not just a list. We present the readiness report to your executive team.
A full CMMC program, run by our team.
We score your current state against all 110 NIST 800-171 controls, set an accurate SPRS score, and write your System Security Plan, plan of action, policies and a conformity statement for each of the 320 assessment objectives.
We work with your IT team or MSP to close the gaps. Then the Certified CMMC Assessors on our team guide a mock assessment run the way a C3PAO will run yours, and we prepare your people for assessment day. A typical project runs about 6 months.
Keep controlled data in one place.
An enclave limits CUI to a defined set of systems and people, which shrinks the scope of your assessment. We build it in Microsoft Azure GCC High in about 30 days.
We connect the engineering and business tools your team uses and document the boundary your assessor will review.
Help desk, engineering and monitoring, billed per user.
After the build, we manage the enclave for you: user support, updates, licensing and changes as your team grows.
Our network and security operations teams monitor it 24/7 and keep the evidence your assessor needs up to date.
The documents an assessor asks for first.
Our documentation package gives you the policies and procedures CMMC Level 2 requires, organized by the 14 families of NIST 800-171.
Your team adapts them to how your company works. You can add coaching or consulting whenever you need it.
For teams that want to do the work themselves.
The course walks your team through a CMMC program in order, across 24 modules, from scoping to assessment day.
It includes our full policies and documentation package and 1 year of access.
Start with a consult
Tell us about your contracts, your team and your current SPRS score. If your contracts include DFARS 252.204-7012 or you receive marked CUI, you likely need Level 2. We'll recommend the option that fits your timeline and budget.
Take the Readiness Check