Cybersecurity Maturity Model Certification - Center of Awesomeness
CMMC Practitioners
REASSURINGLY EXPENSIVE
WORTH EVERY PENNY
If you are looking for a CMMC practitioner, we assembled an assortment of reputable companies that you can evaluate as a possible fit for your specific needs. These CMMC practitioners range from consultants, to Managed Service Providers (MSP), to compliance-focused documentation solutions, all the way to manufacturers. Since every CMMC practitioner has their own specialty you need to do your own due diligence.
The bottom line is you get what you pay for with CMMC consulting services!
CMMC / NIST 800-171 Documentation Solutions
ComplianceForge
855-205-8437
support@complianceforge.com
https://www.complianceforge.com/nist-800-171-cmmc-compliance-bundles/
Specialty: ComplianceForge provides editable, cost-effective cybersecurity documentation solutions that are specific to CMMC 2.0 & NIST SP 800-171 (CUI & NFO controls). ComplianceForge is the "easy button" approach to CMMC & NIST SP 800-171 compliance documentation needs:
-
Policies
-
Standards
-
Procedures
-
SSP & POA&M templates)
-
Incident Response Plan (IRP)
-
Third-Party Risk Management
CMMC / NIST 800-171 Consulting Services
BDO
256-733-1115
cmmc@bdo.com
Specialty: BDO provides organizations with proven experience and certified personnel to mitigate the risk of non-compliance with DoD cybersecurity contracting regulations. BDO’s highly-credentialed and experienced team can help companies achieve their assessment needs within one comprehensive tool and achieve a lower cost of implementation and management for all DoD-mandated cybersecurity compliance frameworks.
The BDO Cyber Assessment Tool (CAT) provides comprehensive assessments for FAR 52.204-21, DFARS 252.204-7012 / NIST 800-171, NIST 800-172, CMMC Maturity Levels 1-5 as well as additional assessments for EXOSTAR cyber questionnaires. BDO professionals assist with cyber architecting, network and systems IT technical solution implementation, policies/artifacts to CMMC assessments. BDO can provide overall package management to help keep your CMMC package current and compliant.
How To GRC
907-299-7775
learn@howtogrc.com
Specialty: HowToGRC is a cybersecurity firm focused on designing and implementing cost effective and scalable cybersecurity programs. HowToGRC provides CMMC and NIST SP 800-171 readiness assessments, advisory and audit preparation along with our continuous compliance management platform, CMMCplus™. HowToGRC has considerable experience implementing and tailoring ComplianceForge products and the Secure Controls Framework (SCF).
DEFCERT
Specialty: DEFCERT supports all facets of "defense contractors" that make up the Defense Industrial Base (DIB), including manufacturers, economic development organizations, managed IT service providers and technology companies. DEFCERT offers a full-range of technology and business process improvement services that includes CMMC consulting, DFARS contract obligation reviews, CMMC implementation and resource planning, system design and validation of existing implementations (to prepare for C3PAO assessment).
DiCicco, Gulman & Co. (DGC)
781-937-5191
dgcinbox@dgccpa.com
https://www.dgccpa.com/services/it-risk-assurance-and-advisory
Specialty: DGC's IT Risk Assurance & Advisory practice provides a wide variety of cybersecurity services including vulnerability assessments, penetration testing, and security and risk assessments. We provide NIST 800-171 and CMMC readiness assessments and consulting services for the DIB and are an applicant to be a Certified 3rd Party Assessment Organization (C3PAO) for CMMC.
CMMC / NIST 800-171 Technology Integrators (MSP / MSSP)
Sentinel Blue
571-485-9030
info@sentinelblue.com
https://www.sentinelblue.com/dfars-cmmc/
Specialty: Sentinel Blue specializes in bringing the leadership, expertise, and technical capabilities required for DFARS compliance to the Small to Medium Enterprises (SME) in the Defense Industrial Base (DIB). We do common sense security - a lot of consultants don't get it about the realities that smaller companies face with limited budget and expertise, so we can right size an approach for your specific needs. Sentinel Blue is also a CMMC Third-Party Assessor Organization (C3PAO).
Steel Root
978-312-7668
info@steelroot.us
https://steelroot.us/solutions/aerospace-defense/
Specialty: Steel Root designs, builds, and manages secure IT environments for companies in the U.S. Defense Industrial Base. Steel Root's reference architecture for DoD compliance enables companies to effectively scope out technical debt and accelerate project timelines. Steel Root also provides compliance advisory services to help contractors manage ongoing program requirements.
The Steel Root reference architecture is a set of systems, configuration baselines, and managed services — built on the Microsoft Government cloud and using zero trust principles — that is purpose built for meeting the CUI safeguarding requirements in DFARS 252.204-7012 and preparing for CMMC.
_edited_.jpg)
Summit7
256-585-6868
cmmc@summit7.us
https://info.summit7systems.com/cmmc-l3-requirements
Specialty: Summit 7 specializes in the Aerospace and Defense (A&D) industry. Summit 7 won the 2020 Microsoft US Partner Award in Security and Compliance for its Office 365 and Azure Government solutions regarding CMMC, DFARS, NIST SP 800-171, ITAR, and CUI.
CMMC / NIST 800-171 Technology Solutions
NeQter Labs
401-608-6522
info@neqterlabs.com
https://neqterlabs.com/product-features/
Specialty: NeQter Labs is a cybersecurity software company dedicated to providing affordable DFARS/NIST SP 800-171/CMMC compliance solutions to the SMB market. Our Compliance Engine platform combines Security Incident Event Management (SIEM), active alerting, inventory, and vulnerability scanning into a single solution.
Beryllium InfoSec
763-546-8354
https://www.berylliuminfosec.com
Specialty: Beryllium specializes in providing NIST SP 800-171 and CMMC compliance solutions, specifically working with SMB’s to successfully segment CUI from their main network and to properly minimize the scope of the CUI environment. Our flagship product, CUICK TRAC™, combines a virtual, privately-hosted enclave, as part of a continuously-monitored and managed security program that helps SMBs become compliant in an affordable, practical and secure way.
CMMC Licensed Training Providers (LTP)
Space Coast Cyber
321-294-3565
info@spacecoastcyber.com
https://www.spacecoastcyber.com
Specialty: Space Coast Cyber is a boutique training company that specializes in advanced cybersecurity education and certification training. We are passionate about our profession and want to help build the cybersecurity community one class at a time with a current focus on Cybersecurity Maturity Model Certification (CMMC) training as an authorized Licensed Training Provider (LTP).
While cybersecurity training is our primary focus and mission, we do engage in limited consulting as our availability allows. Focus areas for consulting are NIST SP 800-171 / CMMC implementation, C3PAO Quality Assurance or assessment team staff augmentation, fractional Information Systems Security Engineering (vISSE) services, NIST Risk Management Framework services, and NIST SP 800-161 Cybersecurity Supply Chain Risk Management (C-SCRM) strategy development and security program management.
CMMC Third-Party Assessment Organizations (C3PAOs)
Cybersec Investments
800-960-8802
https://www.cybersecinvestments.com/cmmc
Specialty: Cybersec Investments is a CMMC Third-Party Assessor Organization (C3PAO) and provides CMMC / NIST SP 800-171 consulting for Small to Medium Enterprises (SME) who need outside expertise to both understand and implement the requirements needed to comply.
Kieri Solutions
301-253-5150
Specialty: Kieri Solutions is a CMMC Third-Party Assessor Organization (C3PAO) with demonstrated expertise in CMMC, NIST SP 800-171, FedRAMP, and DFARS. Kieri Solutions specializes in gap analysis, architecture review and design, process engineering and resource planning. Kieri Solutions is cloud and remote-work friendly and focuses on enabling organizations to become and stay compliant over time. Clients range from small businesses to Fortune 500 companies, including providing guidance to MSPs and cloud service providers who want to make sure their offerings correctly support their DIB clients.
Peak InfoSec
719-327-0110
info@peakinfosec.com
Specialty: Peak InfoSec is a CMMC Third-Party Assessor Organization (C3PAO) that serves all tiers of the Defense Industrial Base (DIB). Peak Infosec specializes in turning cybersecurity programs around to conform to the business’ operational requirements. Its focus isn’t just on the technology, but to make your entire security culture change to what you want it to be.
NIST 800-171 Compliant Manufacturing Services & Consulting
Win-Tech, Inc.
770-423-9358
Specialty: Custom, build-to-print, aerospace and defense machine shop. Veteran-owned small business (VOSB) with in-house machining and fabrication capabilities. Win-Tech supports both prototype and production projects (aluminum, titanium, and other metals, plastics and composites) as well as consulting services to manufacturers pursuing cybersecurity compliance in the industry. Win-Tech speaks CMMC and would like to be your manufacturer of choice (we do subcontracting)!
-
NIST SP 800-171 compliant
-
AS9100D-Certified
-
DDTC-Registered
-
JCP Certified