CyberSage CMMC Readiness Quest

Key Service Deliverables:

• NIST SP 800-171 System Security Plan (SSP): A formal document outlining the security requirements for your information system and detailing the security controls in place or planned to meet those requirements.

• Plan of Action and Milestones (POA&M): Detailed documentation identifying security controls planned for implementation, along with associated tasks and an implementation plan.

• NIST SP 800-171 / CMMC Report Card and SPRS Score: An assessment of your organization's level of NIST SP 800-171 compliance, including the Supplier Performance Risk System (SPRS) score for posting. Includes guidance on posting your score to SPRS.

• FAR 52.204-21 and Basic-31 Compliance Opinion Letters: Attestation of compliance with FAR 52.204-21 and Basic-31 requirements, provided once compliance is achieved.

• Cybersecurity Policy and Procedure Documentation: Documentation to integrate NIST SP 800-171 cybersecurity framework requirements into your business operations for continued compliance and security.

• NIST SP 800-171 Instructional Video Premier Access: Gain exclusive access to our library of instructional videos developed by our CEO, Rachel Leidy, who brings over 15 years of experience in implementing and assessing NIST cybersecurity frameworks for DoD organizations. These videos are curated to provide comprehensive education and guidance on implementing NIST SP 800-171 security requirements efficiently and confidently. Each video covers topics such as understanding the security control requirement, typical implementation in an environment, risks remediated or mitigated by the requirement, and the type of evidence needed during an assessment. With access to these videos for 24 months, you can revisit control requirements as needed while implementing planned NIST SP 800-171 security controls in your environment. This feature not only reduces consultation hours and costs but also allows for more personalized attention during meetings to address specific questions, concerns, and implementation plans tailored to your unique environment.

• CMMC Readiness Project Management: Guided project plan designed to implement NIST SP 800-171 efficiently and cost-effectively, ensuring organized progress toward CMMC readiness.

• NIST SP 800-171 Environment Diagram / CMMC Scoping Diagram: Assistance with identifying and documenting assets that store, process, and/or transmit Covered Defense Information (CDI) within your environment, streamlining scoping and implementation of security control requirements.