Does Your Company Need to Be CMMC Compliant?
Does Your Company Need to Be CMMC Compliant?
What Is CMMC?
The Cybersecurity Maturity Model Certification (CMMC) is a new cybersecurity framework developed by the US Department of Defense (DoD). The goal of the new CMMC requirements is to protect Controlled Unclassified Information (CUI) and Federal Contract Information (FCI).
Who Needs To Be CMMC Compliant?
Any company and its subcontractors that bid on a US Department of Defense (DoD) contract that contains Federal Contract Information (FCI) and/or Controlled Unclassified Information (CUI) will be required to be CMMC compliant. Only contracts for Commercial off-the-shelf (COTS) products will be exempt from CMMC compliance requirements.
When Will This Be Required?
Due to the significant changes in the latest CMMC 2.0 iteration the DoD suspended any CMMC requirements for new contracts until the rulemaking process for CMMC 2.0 has been completed. The process is expected to take anywhere from 9 to 24 months. Although the CMMC compliance requirements are still several months away, we highly recommend that companies who plan to bid on DoD contracts start preparations for their CMMC assessment now.
Early adopters of CMMC will have a clear competitive advantage over their rivals; especially considering that implementation will take several months, and compliance is required at the time of contract award. The sooner your organization meets CMMC compliance requirements, the less competition it will face when bidding on new DoD contracts that require CMMC.
We Do Not Conduct The Final CMMC Assessments
Depending on your organization’s current cybersecurity status and the CMMC Level required, implementation of the new standard can take anywhere from several weeks to a few months. Starting now will save you valuable time and will get you ahead of the competition.
Our audit will help your organization to close existing gaps by implementing suitable controls and addressing any missing requirements including developing and writing the extensive documentation required.
CMMC Pre-Assessment
We will help you prepare for the final CMMC Audit by gathering and organizing evidence for a smooth assessment. Think of it as a mock audit. We will verify that proper security measures are in place, mature, and can be proven to an auditor. If we find issues we will help you fix them and will be at your side throughout the process. We will not recommend the final CMMC Audit until we are confident that your organization is ready.
From Founder and CEO, Eduardo Velandia:
“After one long week with Edwards Performance Solutions, I can say that I'm much more comfortable and confident with my understanding of #cmmc. Joy Belinda Beland, Amira Armond, Matt Hoeper, Chris Silvers, and Tony Buenger were all fantastic instructors and took extra care in explaining the more difficult areas. I am extremely glad to have taken this class and highly recommend it to anyone else interested in obtaining their #CCP!
I wanted to specially thank
Joy Belinda Beland, for encouraging me to take this training. I've known Joy for quite sometime and she has always provided great advice to me about how to improve my MSP practice. I look forward to the weekly study group and to keep the synergy going with this wonderful group of IT professionals.”
