The Top 25 Cybersecurity Companies Of 2020
December 23, 2020
Gray Analytics Promotes New VP of Business Operations
March 2, 2021
Gray Analytics is proud to be authorized as a Registered Provider Organization by the Cybersecurity Maturity Model Certification (CMMC) Accreditation Body to provide advice, consulting, and recommendations related to CMMC requirements.
We recently earned our accreditation and are now well-positioned to provide guidance and expertise to our clients relating to CMMC requirements and the related implications for Department of Defense (DoD) contractors. As an accredited organization, Gray Analytics is certified as to being:
- Aware – we employ staff trained in basic CMMC methodology
- Targeted – ready and able to help organizations prepare for CMMC assessments (Note: we do not and are not authorized to conduct certified CMMC assessments)
- Registered Practitioner Staffed – accredited to provide consultative services
- Trusted – we have agreed to and are bound by the CMMC-AB Code of Professional Conduct
In response to rising cyber threats from our adversaries, the U.S. Government has issued an in-depth list of requirements for U.S. Defense Partners to implement. Current Defense Partners that process Critical Unclassified Information (CUI) must meet DFARS 7012 (NIST 800-171) requirements. CMMC is a successor to NIST, and soon, all defense partners will be required to meet some level of CMMC compliance to be considered for DoD work.
We detailed a few of the core components related to CMMC compliance and what CMMC means for DoD contractors in a recent blog post (read more).
One of the more challenging aspects of regulatory compliance is keeping up with constantly evolving rules and understanding what applies to you. Our team offers a vast amount of experience wading through a variety of government regulations and implementing practical solutions to ensure ongoing compliance. Relative to CMMC, our company’s deep experience and understanding of other DoD and information security regulations (e.g., NIST 800-171, NIST 800-53) provide a firm foundation of expertise on which we stand ready to support our clients.
As the rules are continuing to evolve (see our post on the recent interim DFARS rule), our experience and expertise allows us to stay up to speed on breaking developments and distill extensive legislation down to what really matters and what needs to be done.
Our experience with NIST gap analyses and mitigation is directly applicable to preparing clients for official assessments by the CMMC Third Party Assessor Organizations (C3PAOs). Our team has been closely tracking CMMC and what it will require from federal contractors that wish to bid on any federal contract in coming years, and we have already started helping our clients prepare for the pending assessments. Our deep experience and industry knowledge will help you be ready for the CMMC assessment required to bid DoD contracts and help protect your own operations from cyber threats.
