After a careful study of the results of the CMMC current state assessment, the Network Depot team will prepare a remediation plan with a comprehensive set of steps for your company to follow in order to remediate your network security gaps. This plan will include a timeline for the activities and the estimated costs for implementation. The number of steps and the extensiveness of the changes needed will depend on your company’s current tools, procedures, training, and processes.
There may only be minor changes or updates to systems and policies needed, or major changes and completely new systems, training, and tools might be necessary. The type and seriousness of the remediation steps will also be dependent upon the CMMC Maturity level that is required in the DoD project.
Your company can either implement the recommended steps on your own or work with Network Depot to execute these important changes.
Network Depot will work with your company to prepare the required document templates that are necessary for CMMC compliance including a System Security Plan (SSP) and a Plan-of-Action & Milestones (PO&AM). A SSP describes the roles and responsibilities of security employees, system boundaries, system operation environments, how security requirements are implemented, and the relationships with or connections to other systems. A PO&AM is a comprehensive document that identifies tasks needing to be accomplished for CMMC compliance. It details the resources required to accomplish the elements of the plan, milestones for meeting the tasks, and proposed milestone completion dates.
Network Depot will also assist your company in completing the legal documentation necessary to prove that you are meeting and maintaining the required CMMC compliance standards, which you can submit to the third-party assessor organization (C3PAO) performing the official CMMC audit.
One point that we stress is the importance of passing the CMMC audit on the first attempt. It is a lengthy and complex process to prepare for and pass a CMMC audit, which thoroughly assesses how your company is meeting a variety of stringent security controls. In addition, there is a growing demand for companies seeking to pass these audits, which could result in a lengthy wait to try again.
For these reasons, we recommend that you work with a well-respected IT compliance expert like Network Depot to help you thoroughly prepare for your CMMC audit and pass it on the first try.