last changes 06/14/2022
The CMMC Readiness Check is a service that provides you with the confidence that your CMMC documents are compliant with the requirements of the CMMC standard. Think of it as the CMMC Pre-Assessment but solely focused on the documentation part. Your documentation is what the C3PAO will focus on during the first step of a CMMC Certification Assessment and which will determine if they will continue with the actual assessment.
The CMMC Assessment by a C3PAO happens in three steps:
- Readiness Review:
~4 weeks prior to the on-location assessment the C3PAO will request all required documentation such as SSP, policies, procedures. After reviewing these documents the C3PAO will determine if your organization is ready for the CMMC Certification Assessment. If your company fails this step it will result in obvious delays, potentially missed opportunists, and additional cost. Our CMMC Readiness Check service is designed to prevent this from happening. It offers a cost-effective documentation review by our CMMC experts and peace of mind. - Assessment:
~1 week the C3PAO will be at the location(s) in scope and verify the implementation and maturity of all controls. Our CMMC Pre-Assessment service verifies your readiness for this step. - Reporting:
~2 weeks that it will take for the C3PAO to write the assessment report
What to Expect From a CMMC Readiness Check
Our CMMC expert will request your documentation for review and provide you with a written evaluation report. This report includes language suggestions, points out any missing items, and provides improvements for existing items. Included in the review are:
- SSP
- POAM
- Policies
- Practices
- Control Policies
- CMMC Scoping Document
The resulting report will be presented and discussed in a meeting within approximately 2 weeks. Any other suggestions and potential issues will be discussed at this time as well.
Due to our status as a Cyber AB Registered Practitioner Organization™ (CMMC-RPO), Ecuron can perform pre-assessment services which include CMMC Gap Assessments (also called CMMC Gap Analysis), help with remediation and implementation, and CMMC Pre-Assessments. We do not conduct the final CMMC Assessments.
Take the first step in aligning your information security requirements. To discuss your CMMC requirements and schedule a complimentary 15-30 min consultation, email us at cmmc@ecuron.com or use the form bellow.
Additional Articles
Receive Our Latest Posts & Publications
