Join Us for Our December 18th Webinar
CMMC Readiness: De-Risk Your Compliance
Security Compliance = Secure Client Base
Save Your Seat
Security Compliance = Secure Client Base
Save Your Seat
Portland, Bangor, and other Maine Department of Defense (DoD) contractors and subcontractors will soon be required to comply with the new Cybersecurity Maturity Model Certification (CMMC) 2.0 requirements. The CMMC program is intended to better enforce cybersecurity requirements across the defense industrial base (DIB) to better protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI).
Once implemented, DoD contract solicitations will indicate the required maturity level for the winning contractor. If a contractor does not have the appropriate certification in the DoD’s Supplier Performance Risk System (SPRS), then the contractor will be ineligible for contract award.
CMMC Level 1 will be added to contracts where FCI only will be received or generated by the contractor. Level 1 will require organizations to annually self-assess and affirm their compliance with the 17 Level 1 practice requirements, which are composed of 59 assessment objectives.
CMMC Level 2 requires a triennial third-party assessment and annual affirmation of compliance with 110 practice requirements, which are composed of 320 assessment objectives. Level 2 also expands the type of information system assets that are in scope for assessment, compared to Level 1.
CMMC Level 3 requires an existing Level 2 certification, and contractors will be assessed by the DoD for compliance against an additional 24 practice requirements. Level 3 also expands the type of information system assets that are in scope for assessment, compared to Level 2.
By most estimates, organizations are likely to require 12-18 months to prepare for a Level 2 assessment. With the CMMC final rule likely taking effect during the first half of 2025, Washington DC DoD contractors who wish to participate on new DoD contracts should start preparing as soon as possible.
Many Portland DoD contractors will need assistance performing initial assessments to uncover issues, establish corrective actions, and to chart a path towards CMMC readiness.
The CMMC is complex. ML 3 contains 381 discrete cybersecurity requirements spread among 130 practices, and 310 policy/procedure requirements spread among 51process maturity requirements. The requirements are complex, and our team has almost 20 years of experience providing cybersecurity compliance services across many complex frameworks such as NIST SP 800-171, NIST SP 800-53, HIPAA, and others. As a CMMC Registered Provider Organization (RPO), our team can help DoD prime and subcontractors with the following:
Keiter provides CMMC readiness assessments and remediation services to DoD contractors across Maine including in Portland and Bangor. If you are interested in learning how we can assist your organization, complete the form below and a team member will follow up promptly.
"*" indicates required fields
Maine’s Department of Defense (DOD) contractors play a crucial role in supporting national security and defense efforts. While Maine may not have the same level of visibility as some other states in terms of military installations, it is home to a network of skilled defense contractors specializing in various fields.
These contractors collaborate with the military and government agencies to provide essential services and products. They contribute to areas such as shipbuilding, maritime technology, logistics, and research and development. Given Maine’s strategic coastal location, maritime-related defense activities are of particular significance.
Maine’s DOD contractors not only support national security but also have a positive economic impact on the state by creating jobs and fostering innovation. They help ensure the readiness and effectiveness of the United States military forces, demonstrating Maine’s commitment to the nation’s defense efforts.