CMMC · Compliance readiness
The prime needs your CMMC level before the next award. You need a plan.
A gap assessment against the level you need, the fixes in order, and the evidence an assessor expects.
How we workSame six steps, every project
- 1Issue
- 2Input
- 3Plan
- 4Solution
- 5Execution
- 6Happy client
Step 3 of 6: Plan
See the six steps for thisIf you supply into the defense chain, your contracts will ask for a CMMC level. We get the controls in place and the evidence ready; the assessment itself is done by a certified third party, and we say so.
Levels and what they require
Level 1 covers basic protection of federal contract information and is self-assessed. Level 2 covers controlled unclassified information, follows the NIST SP 800-171 control set, and for most contracts is assessed by an accredited third party. Your contracts tell you which level; the work is knowing exactly where that information lives in your systems, because everything else scopes from there.
We get the controls in place, write the System Security Plan, and build the evidence the assessor works from. The assessment itself is done by someone else, and we say so – a supplier who claims otherwise is a supplier who has not read the rules.
What is included
- Scoping: where the CUI actually lives
- NIST SP 800-171 gap assessment
- System Security Plan and POA&M
- Controls implemented and evidenced
- SPRS score, supported by evidence
- Preparation for the third-party assessment
Why clients stay
- 2004
- In business since
- 950+
- People we support
- 60 days
- Money-back guarantee
“After meeting Mariusz and discussing what our needs were with the budget we were looking to work with, a network system was designed and installed. When needed the Interactive AV-IT team has gone above and beyond the call of duty to resolve any issues.”
Ready to talk?
Book a fifteen-minute call, or tell us what you are dealing with and we will tell you what we would check first. No obligation.
Why businesses choose us
- One team for IT and AV – the network, the security, the phones and the boardroom.
- 24/7/365 monitoring, with a helpdesk that knows your office.
- A 60-day money-back guarantee for new managed clients.
- Based in Hauppauge, on site across Long Island and New York City since 2004 – and now in Boca Raton, FL.