I will prepare your cmmc level 1 and level 2 gap assessment and ssp
Over deze dienst
Do you handle Federal Contract Information (FCI) or Controlled Unclassified Information (CUI) for the U.S. Department of Defense? Then CMMC compliance is no longer optional, and I can help you get ready.
I'm a cybersecurity compliance specialist with hands-on experience in CMMC 2.0, NIST SP 800-171, and FAR 52.204-21. I turn confusing requirements into a clear, practical plan your team can follow.
WHAT YOU GET:
CMMC Level 1 gap assessment (15 practices)
CMMC Level 2 gap assessment (110 NIST 800-171 controls)
System Security Plan (SSP)
Plan of Action & Milestones (POA&M)
SPRS score calculation
Policies, procedures, and evidence checklists
CUI scoping and data flow guidance
WHO THIS IS FOR:
- Small and mid-sized defense contractors and subcontractors
- Manufacturers, IT providers, and engineering firms
- Teams preparing for a self-assessment or a C3PAO assessment
WHY WORK WITH ME:
Plain-English reports, no jargon
Clear, prioritized remediation steps
Confidential handling of your information (NDA available)
Please note: I provide consulting and documentation support only. I am not a C3PAO and cannot certify or guarantee assessment results.
Veelgestelde vragen
What's the difference between CMMC Level 1 and Level 2?
Level 1 covers 15 basic safeguarding practices for Federal Contract Information and uses an annual self-assessment. Level 2 covers 110 practices aligned to NIST SP 800-171 for Controlled Unclassified Information, and depending on your contract it requires either a self-assessment or a third-party C3
Will this make us CMMC certified?
No. Only an authorized C3PAO can conduct a certification assessment. My service prepares your documentation and identifies gaps so you're ready.
Do I need to give you access to my systems?
No. I work from your answers, documents, and screenshots. I never need admin credentials.
Is my information kept confidential?
Yes. I'm happy to sign an NDA through Fiverr before you share anything.
Which level do I need?
It depends on whether you handle FCI only (Level 1) or CUI (Level 2). Send me a message and I'll help you confirm before you order.
Can you help with remediation?
I provide a prioritized remediation roadmap and policy templates. Hands-on technical implementation can be quoted as a custom offer.
