GUARDIANSHIELDCMMC Level 2 Readiness & NIST 800-171 Gap Analysis
Find out where you stand against the 110 NIST SP 800-171 Revision 2 requirements that CMMC Level 2 uses, and what it will take to close the gaps. Readiness, not certification.
Readiness, not certification
We help you prepare. We review your environment against NIST SP 800-171 Revision 2, as required by DFARS 252.204-7012 and the CMMC program rule (32 CFR Part 170), show you which requirements are met, partially met or not met, and give you a prioritized plan to close the gaps. We do not grant, predict or guarantee any CMMC outcome; that decision belongs to an authorized third party you choose separately.
Deliverables
- Control-by-control gap list against NIST SP 800-171
- Prioritized remediation plan with effort and cost ranges
- Scoping notes for CUI and FCI
- Readout session with your leadership
Scope
- Small and mid-sized defense suppliers
- Fixed-scope engagement
- Feeds directly into SSP & POA&M and enclave projects
- Not included: third-party attestation of any kind
How our assessment and consulting work stay separate. Guardianshield operates two separate wings: an Authorized C3PAO assessment practice, and a consulting and implementation practice. Independence rule: Guardianshield's C3PAO will not perform a CMMC Level 2 certification assessment for any organization to which we have provided consulting, implementation, or CMMC products (including SSP, POA&M, or remediation work) in the previous three years; those organizations must use a different, independent Authorized C3PAO from the Cyber AB Marketplace (32 CFR 170.8(b)(17)(ii)(G); Cyber AB R2002 C.4.1.8). If our C3PAO assesses you, no one at Guardianshield will provide advice, remediation or implementation help during that assessment.
Ready to scope your project?
Tell us about your environment and we will send a fixed-scope proposal.
Schedule a Free Consultation301-453-2983