Do you need CMMC?
The Cybersecurity Maturity Model Certification (CMMC) is the unified framework to be used by the Department of War (DoW) for acquisitions of both prime and subcontractors that provide goods and services to the DoW. In the past, both prime and subcontractors needed to attest to Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012 compliance as part of the award process. CMMC contrasts DFARS 252.204-7012 by forcing the requirement before award, or ”pre-award.”
Any prime or subcontractor that provides goods or services to the DoW will need to comply with the CMMC for third-party assurance that they are able to protect controlled unclassified information (CUI). There are multiple levels of CMMC certification, and the DoW will inform organizations of the CMMC maturity level they need to achieve in order to be awarded contracts.
What we do
CMMC STARS program
Major milestones and deliverables
The STARS CMMC readiness program onboarding process scopes the organization’s current CMMC journey. STARS is a holistic approach to meeting CMMC and government contractual requirements. However, aligning the organization’s CMMC maturity with the appropriate STARS phase allows Sikich to integrate established processes and documentation into the program. The onboarding process and alignment saves money and time by streamlining what is required to achieve a secure and compliant environment.
Here is what you can expect at each step:
- Define CUI scope
- Provide training materials
- Implement continuous compliance support
- Design a strategic remediation roadmap
- Perform DoW basic self-assessment
Additional CMMC services
Network and application testing, security consulting, and policy development that strengthen your defenses and build long-term resilience.
Data recovery, electronic litigation, forensic investigations, and breach remediation.
Continuity planning, security assessments, and vendor management.
