CMMC Accelerator
Monthly
Deliverables
- GRC Tool Implementation (CUIComply)
- Custom SSP, Policy & Procedure Development
- Control Design, Implementation & Testing
- MSP/MSSP Advisory Support
- Initial CMMC Risk Assessment
- Incident Response Plan & Tabletop Exercise
Deliverable details and dependencies are outlined within Appendix A
How We Deliver
- Dedicated Team – Assigned CCA/CCP with backup coverage and a dedicated Project Manager
- Working Sessions – Weekly 1.5-hour collaborative session to drive progress
- Responsive Support – Defined response times* with communication via Slack, E-mail, or Teams to meet the customer where they are
- Status Reporting – Weekly updates covering completed work, upcoming activities, CMMC timeline progress, and identified risks
- Executive Reporting – Monthly executive-level report summarizing progress, key risks, and overall program health
Timeframe
3–16 Months
CMMC Oversight
Annual
(After Readiness is Obtained)
Deliverables
- Annual Security Assessment & SPRS Score Update
- Annual SSP Review & CUI Scoping Validation
- Maintain & Validate Data Flow Diagrams
- Verify Access & Configuration Review Completion
- Policy, Training, and Documentation Updates
- Annual Risk Assessment Exercise
- Annual Incident Response Tabletop Exercise
- NIST SP 800-171 Rev. 3 Transition Support
Deliverable details and dependencies are outlined within Appendix B
How We Deliver
- Dedicated Team – Assigned CCA/CCP with backup coverage and a dedicated Project Manager
- Working Sessions – Bi-weekly (every other week) 1.5-hour collaborative session to drive progress
- Responsive Support – Defined SLA response times* with communication via Slack, E-mail, or Teams to meet the customer where they are
- Status Reporting – Monthly updates covering completed work, upcoming activities, CMMC timeline progress, and identified risks
- Executive Reporting – Quarterly executive-level report summarizing progress, key risks, and overall program health
Timeframe
Ongoing