CMMC Preparedness

CMMC Preparedness: Webinar Recap

KTL Solutions recently hosted a webinar on Cybersecurity Maturity Model Certification (CMMC) Preparedness and welcomed esteemed guest Richard Wakeman of Microsoft. Richard is the Senior Director of Aerospace & Defense and Azure Global Engineering. During the webinar we covered topics ranging from CMMC-AB Town Hall News, Microsoft Offers, and GCC versus GCC High to name a few.  We also discussed some of the items coming down the pipe from the DOD including current instructions for the 5000.90 guide for Project Managers, the status of the DCMA’s DIBCAC assessments of C3PAO’s, and important updates from the CMMC-AB March Town Hall.  

Key Points

One item of note involves achieving compliance with NIST 800-171 requirements and not waiting until the last minute to prepare for a CMMC assessment. This cannot be stressed enough. Currently DOD Project Managers (PMs) simply validate a score in the Supplier Performance Risk System (SPRS) prior to a contract award. However, it is only a matter of time before PMs will be instructed to give preference to higher scores. With that said, it is vitally important to get your NIST 800-171 requirements in place as you work towards becoming compliant with CMMC.

Considerations: Regulations and Costs

Now that GCC is FedRAMP High and will support DFARS 252.204-7012 flow-downs, the Defense Industry Base (DIB) has options on which cloud offering works best depending on what Controlled Unclassified Information (CUI) they utilize. Does that mean a contractor can choose either GCC or GCC High? The answer is that it depends. If you transact with International Traffic in Arms Regulations (ITAR) or Export Administration Regulations (EAR), then GCC High is the only option. Besides regulatory considerations, a contractor must make smart business decisions as well. Weigh the cost between GCC and GCC High and think long term. Choose wisely; a decision to start in GCC could become more costly if you must later migrate to a different sovereign cloud, incurring additional expenses and losing valuable time during migration.

Expert Guidance: Microsoft and KTL Solutions

Microsoft provides excellent resources to assist in your compliance efforts. This includes tools like:

Contact KTL for a free 1-hour consultation to kickstart your journey towards CMMC Preparedness. KTL Solutions is a Microsoft Gold Partner and an authorized CMMC-RPO with CMMC-RP’s on staff to guide you.

In Case You Missed It

Watch the recorded CMMC Preparedness Webinar on our YouTube channel. You may also download a copy of the presentation deck. We look forward to seeing you at our next webinar. 

Share this post

Related Posts

KTL Solutions Makes Inc. 5000 List for 2022

Each year, Inc. Magazine comes out with its list of the fastest-growing private companies in the nation. The 2022 list includes 131 Maryland businesses, with 11 of them making the prestigious Top 500. Those 131 MD-based businesses represent $2.7 billion in total revenue and more than 10,500 jobs added.

Read More »