If you handle controlled unclassified information, NIST 800-171 is the standard you answer to, and the foundation of CMMC. We help you implement all 110 controls and keep the evidence current.
What's included
We measure your environment against all 110 controls and document where you stand.
We build and maintain the SSP that describes how you meet each requirement.
A living plan of action and milestones for any gaps, with owners and dates.
We put the technical and administrative controls in place across your environment.
We keep the documentation and evidence assessors and primes expect.
Done right, and done with you
Questions, answered
Any organization that stores, processes, or transmits controlled unclassified information for the federal government, including many subcontractors.
CMMC Level 2 assesses your implementation of NIST 800-171. Getting 800-171 right is the path to CMMC.
A System Security Plan documents how you meet each of the 110 requirements. It is central to both 800-171 and CMMC.