DoD Contractor’s CMMC Roadmap

Continuous Process Improvement Systems has a mission to provide affordable solutions to companies striving to achieve Cybersecurity Maturity Model Certification (CMMC)

CPI Systems will help you understand what knowledge you need in house and what knowledge the experts need to bring for your CMMC certification. This is accomplished through customized workshops and partnership with expert organizations who exist to grow American manufacturing SMBs. The organizations CPI Partners with are:

• Manufacturing Extension Partnerships (MEP’s), is a US Government backed public-private partnership that brings growth fueling solutions to American Manufacturing. The MEP board is tasked “to identify proactive actions that will enable small manufacturers to successfully address and implement changes in technology and the business environment in the future.”
• Various Manufacturing Associations provide expertise with the type of business you have.
• Procurement Technical Assistance Centers (PTAC’s) provide the information needed to assist you with obtaining and maintain government contracts.

The three workshops below with customized sessions are designed to be taken individually in two or three hour sessions so you can fit them into your busy week. Workshops are affordable and can be bundled together for a savings!

Available Workshops

Customized Workshops

CPI Systems provides both the flexibility and affordability to get you up to speed where needed and understands that one size does not fit all. Sometimes there are areas of need related to understanding an aspect of CMMC compliance and how it affects your specific area of business that need dedicated learning. CPI Systems serves small and medium sized business primarily in the electro-mechanical, machining, construction, and facility management industries and can tailor a workshop for one person or create a training video series for your entire staff.

NIST – SP 800-171 Basic Self-Assessment & Scoring Workshop – (7 hours)

If you are not 100% confident in your companies understanding of the NIST 800-171 requirements, are unsure of what is required and how to score the assessment, then this workshop is for you.

This workshop will assist companies in their NIST basic self-assessment as required by DFAR 252.204-7019, Safeguarding CUI (Controlled Unclassified Information). It is designed to facilitate scoring and reporting according to Annex A (scoring) and Annex B (reporting/formatting) of the NIST SP 800-171 DoD Assessment Scoring Template, version 1.2.1. At the end of the workshop, you will be able to confidently complete a SP 800-171 Basic Self-Assessment.

The workshop consists of preparation exercises, three two-hour sessions, and a remote one-on-one consultation.

CMMC Level 1 Compliance Workshop, (FCI) Federal Contract Information – (7 hours)

This workshop is facilitated by a CMMC Provisional Assessors who will ensure you are familiar with CMMC requirements that apply to your company. It was developed to assist CMMC Level 1 certification preparation through identifying objectives required to show evidence of level 1 maturity and compliance to the Cybersecurity Maturity Model practices. At the end of the workshop, you will have an implementation plan along with a list of objective evidence to facilitate CMMC Level 1 certification assessment.

The workshop consists of preparation exercises, three two-hour sessions, and a remote one-on-one consultation.

A recording of the session will be provided for you to review when necessary.

CMMC Level 2 Workshop, (CUI) Controlled Unclassified Information – (14 hours)

This workshop is for anyone Not well acquainted with the CMMC requirements of CUI. This includes businesses with limited IT staff and/or resource to document and implement the 110 CMMC requirements for CUI. This workshop should be taken after the Basic NIST Self-Assessment is completed and scored, a gap analysis has been done, and preliminary SSP (System Security Plan) has been completed. At the end of this workshop, participants will be able to write policies and procedures required in stage 2 of CMMC and identify the objective evidence required to demonstrate your infrastructure is compliant to Level 2 maturity model practices.

This workshop consists of preparation exercises, four three-hour sessions, and a remote one-on-one consultation.

A recording of the session will be provided for you to review when necessary.