CMMC
CMMC Prep and Certification Assessments
Government contractors of all sizes cannot risk the security of their business and the protection of Controlled Unclassified Information (CUI) in non-federal systems. While CMMC Certification is changing, TECH LOCK is helping organizations with the up-front planning, preparation, and current enhancements to their cybersecurity practices.
Ask us about a personalized path to success from beginning to end. Baseline prep and self-assessment assistance in managing and implementing controls as required to achieve your desired CMMC maturity level.
What are the CMMC 2.0 Certification Levels?
Cybersecurity controls and processes have been grouped into three maturity levels. As the current 2.0 standard is not yet finalized, there is an understanding that these levels are meant to protect against progressively higher levels of risk based on the type of DoD contract and information being processed.
Foundational includes only 17 practices as specified in 48 CFR 52.24-21, Basic Safeguarding of Covered Contractor Information Systems. Annually a security self-assessment must be accomplished and signed off by an executive of the company.
Advanced focuses on protecting CUI. It includes all the 110 controls specified in NIST 800-171. To gain CMMC Level 2 certification, a business must show that it has documented and is actively managing cybersecurity policies and processes. A C3PAO certified third-party assessment must be performed to verify the ongoing security maturity of the organization.
Expert focuses on protecting CUI from multi-vector, state-of-the-art Advanced Persistent Threats (APTs) mounted by government-sponsored hackers. These organizations must apply NIST 800-171 and also NIST 800-172. Government-led assessments of Level 3 organizations will be conducted every three years.
Our Services
Assessment & Gap Analysis
We will assess and analyze the domain areas, processes, and practices associated with NIST 800-171 to protect CUI in non-federal systems. Additionally, if needed, TECH LOCK can also evaluate against NIST 800-172 the enhanced security for the protection of CUI systems. Understand where you need to improve and how best to achieve better outcomes before any CMMC Certification Assessment.
Organizational Security Planning
Remove the guesswork and ensure you have the proper controls, procedures, and plans. This includes the oversight and consultation services to help with security value and cost-efficiency. Leverage our experience to quickly achieve confidence and proof of having the security maturity to promptly detect and protect in the face of increased cyber threats.
Fully Managed Security Solutions
Quickly grow the ability to achieve advanced MDR and Security Operations Center (SOC) round the clock. Benefit from the lower cost of having us manage your security end-to-end or supplement your operations with log management or vulnerability management to ensure nothing is missed when keeping pace with cyber threats.
“The Department of Defense (DoD) announced that contractors who provide products and services within the Defense Industrial Base (DIB) will be required to comply with the Cybersecurity Maturity Model Certification (CMMC). “
We have an extensive understanding of cybersecurity, NIST SP 800-171/800-172/800-53, ISO 27001/27002. Our team also can provide PCI-QSA, PCI-ASV, and HITRUST Certifications.
TECH LOCK is an authorized CYBER AB C3PAO
Additional Reading:
CMMC Pre-Certification Assessment Benefits
Learn how a CMMC preparedness assessment led to streamlined security operations
