CMMC Project Management
+ manage the CMMC Project
+ coordinate internal & external meetings
+ facilitate continuous monitoring of CMMC requirements
Data Flow Analysis/Scoping
+ determine the FCI & CUI data flow
+ define the CUI environment
+ determine the assessment scope
Assessment Readiness & Gap Analysis
+ assess the organization against the 320 assessment objectives of NIST 800-171A
+ provide a roadmap to fully implement all 110 NIST 800-171 requirements
SSP, Policy, and Procedure Development
+ SSP development
+ create policies and procedures
+ maintain documentation
Subject Matter Expert (SME) Assistance
+ assistance during C3PAO assessment
+ MSP support as CMMC SME
+ remediation assistance after assessment
Training
+ CUI training
+ security and role-based training
+ insider threat training
IRP Development, Training, & Testing
+ develop a tailored IRP
+ facilitate annual testing of IRP
+ update/maintain IRP