For buyers
Fractional CISO (fCISO)
Learn more
For buyers
CMMC L1 readiness
We find where your Federal Contract Information lives and check it against the 17 Level 1 practices.
Who it’s for
Small businesses that got a CMMC Level 1 flow-down from a prime, usually because you handle Federal Contract Information but not CUI. Owner-led manufacturers and small contractors are the typical fit. We work onsite in the Baltimore–DMV Metro corridor and remotely everywhere else in the U.S.
Level 1 is the lighter of the two CMMC levels, but it still trips people up, and usually at scoping. So that’s where we start: which systems, people, and facilities actually touch Federal Contract Information, and which can stay out.
Then we walk the 17 Level 1 practices against what you do today. You get the gaps in plain language, in the order we’d close them, and an evidence checklist the people who run your systems can keep current. When it’s time for your annual self-assessment and affirmation in SPRS, you’ll know exactly what you’re signing.
Deliverables
- A written scope of Federal Contract Information, including what’s out of scope and why.
- A gap list against the 17 CMMC Level 1 practices.
- A prioritized order for closing those gaps.
- An evidence checklist the people who run the systems can update.
Timeline
It depends on your scope and your contract deadline. We put dates in the quote once we’ve seen both.
Related
Next step
Start with a 30-minute call.
Tell us what you’re working on and when it’s due, and we’ll tell you the first two steps.
30-minute intro call on Google Meet