Services
CMMC Certification Support and Training
CMMCMARK offers two services for defense contractors: certification support that prepares your company for its CMMC self-assessment or third-party assessment, and training for your workforce, your leaders and professionals pursuing CMMC credentials.
Our services
CMMC certification support
We prepare your company for the CMMC level in your contracts, from the first gap review to the day of your assessment.
- Readiness (gap) assessment against your required level
- Scoping, including a separate enclave for CUI where it makes sense
- System security plan and policy guidance
- Plan of action (POA&M) and remediation guidance
- Mock assessment before the real one
- Support with your SPRS entry and annual affirmation
CMMC training
We train the people who make CMMC work: everyone who touches controlled information, and the professionals who assess it.
- Security awareness and role-based training for staff
- CMMC briefings for executives and Affirming Officials
- Self-assessment training for compliance and IT teams
- Courses for professionals pursuing CMMC credentials
How does an engagement work?
Introductory call
We learn what your contracts require, what information you handle and where you stand today.
Scope and proposal
We agree on the systems and teams in scope and send a clear proposal with deliverables and timing.
Work together
We assess, guide remediation and documentation, and train your people, at a pace that fits your operations.
Assessment and beyond
We confirm you are ready before your assessment and help you keep your status current with yearly affirmations.
Who do we work with?
- Prime contractors and subcontractors that handle FCI or CUI
- Companies that see CMMC requirements in new solicitations or flow-down clauses
- Organizations that need their staff and leaders trained on CMMC
- Professionals building a career in the CMMC ecosystem
We prepare; authorized assessors certify. CMMC certification assessments are performed by authorized C3PAOs (Level 2) and DCMA DIBCAC (Level 3). Our role is to make sure you walk into that assessment ready.
Questions about our services
Can CMMCMARK certify our company?
No. Only authorized C3PAOs (for Level 2) and DCMA DIBCAC (for Level 3) perform CMMC certification assessments. We prepare you for those assessments and support your self-assessments.
Do you work with small businesses?
Yes. Many subcontractors in the defense supply chain are small businesses, and we scale the work to your size, your systems and the level your contracts require.
Can you help if we only need Level 1?
Yes. Level 1 is a yearly self-assessment of 15 requirements. We can review your controls and evidence and help you record the result and affirmation in SPRS.
Tell us where you stand
A short call is enough to understand your CMMC requirements and recommend a next step.
Prefer the phone? Call +1 (202) 867-8444.
