CMMC Gap Assessment led to Enclave Implementation
Guided a multi-industry conglomerate through CMMC compliance across its subsidiaries' diverse tech stacks.
- Industry
- Government Contractors
- Company Size
- $1 Billion / 5,000+ people
- Project Duration
- 3 months
Challenge
Client is a large organization with multiple subsidiaries across various industries including federal government contracting, real estate, and retail stores. They asked for an assessment of how their centralized IT function was serving their disparate businesses and the potential impact of CMMC requirements on the company.
Approach
- Interviewed stakeholders across the organization to develop a multi-dimensional view of technology strengths and weaknesses
- Developed recommendation on how to augment centralized IT function with specialty technology skills where needed (e.g. to address CMMC requirements for federal government contractor subsidiary)
- Provided overview of CMMC 2.0 requirements and steps required to comply with certification
- Developed and delivered training to Board of Directors on their role/responsibilities for cybersecurity governance
Outcome
Client decided to develop a technology enclave for their federal subsidiary to address CMMC requirements in a cost effective manner and avoid burdening the rest of the organization with unnecessary compliance requirements.