Overview

The Defense Federal Acquisition Regulation Supplement (DFARS) 252.204.7012 established the National Institute of Standards and Technology’s Special Publication 800-171 Rev.2 (NIST 800-171) as the principle security standards for protecting both Controlled Unclassified Information (CUI) and Covered Defense Information (CDI) associated with Department of Defense (DoD) related contracts.

The Cybersecurity Maturity Model Certification (CMMC) builds upon the existing DFARS 252.204-7012 regulation.  CMMC adds a verification component.  The goal is for CMMC to be cost-effective and affordable for small businesses to implement at the lower CMMC levels.  Site2 helps make that a reality. 

• Applies to all contractors supporting the Defense Industrial Base (DIB)
• Learn how Site2 can assist with with the process controls and practices
• Comply before your audit

Site2 has CMMC Registered Practitioners to guide you through the implementation process.   

• Gap Analysis & Basic Self-Assessments
  
• Plan of Actions and Milestones (POAM)
  
• System Security Plan (SSP)
• Policies and Processes

Cyberconverged Storage — meets 19 of the 110 NIST 800-171 controls

• Secures CUI files
  
• Audit Logging
  
• Access Control 
• SIEM integration 

System Security Plan 

Do you have an SSP in place? Does it need updating? The SSP should accurately reflect your actual implementation of the controls or practices. A current and valid SSP is a critical requirement that can’t be overlooked for your audit.

Maintaining Compliance

Often overlooked, maintaining compliance with DoD security standards can be a complex undertaking, and requires a documented plan and structured daily  activities. We’ll help you determine the resources you’ll need to properly maintain compliance.