NIST SP 800-171 defines the requirements to protect sensitive DOD information. DFARS 252.204-7012 was the first framework, allowing contractors to self-assess and declare compliance. CMMC 2.0 sets multiple compliance levels, requiring third-party certification.
We’re here to guide you through it all.
With CMMC 2.0,
self-certification ends
It stands for Cybersecurity Maturity Model Certification, it’s here, and it is mandatory. CMMC 2.0 is the current set of cybersecurity standards and best practices that will be a go/no-go requirement for competing for and winning DOD contracts, from primes all the way to the smallest subcontractor.
DFARS came first. CMMC 2.0 will replace it. Both are based on NIST requirements. But unlike DFARS, which allows self-certification, CMMC must be certified by a third-party auditor to one or more of three “maturity levels” — Level 1 (Foundational), Level 2 (Advanced) and Level 3 (Expert), based on the sensitivity of project-related information.
AIM™
A simple process to address
a complex need.
Want to learn more? Dive deeper.
Requirements
A brief overview of the CMMC 2.0 tiered framework
Assessment
Details on assessing NIST 800-171 compliance
Implementation
A brief summary of the implementation process
Managed Services
Ensuring ongoing compliance and data protection
Every solution begins with a conversation.
Contact us today for a no-obligation discussion of CMMC 2.0 compliance, what's required, what you may need and what we can do to provide it. We've helped hundreds of DOD contractors. We can help you.