As we recently reported, The Department of Defense (DoD) has outlined its four (4) phase approach for the inclusion of Cybersecurity Maturity Model Certification (CMMC) Program requirements in solicitations and contracts.
The first phase, which is expected to begin in the 1st quarter of 2025, will require all companies who engage with the DoD to include their CMMC Level 1 or Level 2 Self-Assessments. The DoD also states that they reserve the right to enforce these requirements before this date and/or require companies to complete a CMMC Level 2 Certification Assessment instead of a Self-Assessment. The Certification Assessment is an assessment conducted by CMMC enforcement officials themselves.
The bottomline is that companies will need to have completed an assessment, either by themselves or by a certified third-party, like SysArc, by Q1 of 2025 in order to be considered for contract awards.
Why You Should Act Now
Because the CMMC assessment and readiness process can take 12 to 18 months (depending on system complexity) to complete, it is crucial that DoD contractors act as soon as possible if they have not already started the process. Companies who have already prepared may have a significant competitive advantage in the contract award process.
How to Prepare
There are two routes companies can take to prepare:
- Use In-House Resources: Companies with internal IT resources may be able to complete the CMMC Self Assessment themselves. The DoD has provided both CMMC Level 1 and Level 2 Self Assessment Guides that can aid in the process. Those can be found here.
- Hire a CMMC RPO: For those companies who lack the time and resources, a CMMC Registered Provider Organization (RPO), like SysArc, can perform a readiness assessment or a mock assessment for you and guide you through the process of preparing for all phases of the CMMC rollout. If this option sounds best for your organization, request a consultation here.
How We Can Help
As a CMMC RPO, SysArc has helped over 1,500 DoD contractors navigate the complexities of CMMC since 2017. We can conduct a CMMC readiness assessment or mock assessment and develop a roadmap for you to achieve CMMC certification so you can continue to do business with the DoD without delay. Our years of experience in supporting DoD contractor IT systems has made us a leader in the space, able to offer CMMC preparation faster and for less cost than other options on the market. Request a free consultation here.