As the CMMC Churns
How much is a CMMC Conformity Assessment Cost gonna cost???
“How much is a CMMC Conformity Assessment going to cost???”
This is the foremost favorite question every Organization Seeking Compliance (OSC) is asking CMMC 3rd Party Assessor Organizations (C3PAO) right now.
While this episode won’t answer that question for you, it will let you know factors we have to take into account when figuring out your Conformity Assessment estimated costs.
We then leap to the question that immediately follows: “How can we reduce our Conformity Assessment costs?” We give common strategies we use when consulting to help organizations reduce their costs to get certified.
Key CMMC Organizations
- National Archives & Records Administration Controlled Unclassified Information (CUI) Homepage
- DoD CIO’s Cybersecurity Maturity Model Certification (CMMC) Home Page
- Cyber Accreditation Body (Cyber-AB)
- Defense Industrial Base Cybersecurity Assessment Center (DIBCAC) Contractor Resource Page
- Defense Industrial Base (DIB) Cybersecurity Portal
Key Regulations
Key Acquisition References
- 48 CFR § 52.204-21 – Basic Safeguarding of Covered Contractor Information Systems
- DFARS Clause 252.204-7008 Compliance with Safeguarding Covered Defense Information Controls.
- DFARS Clause 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting.
- DFARS Clause 252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements
- DFARS Clause 252.204-7020 NIST SP 800-171 DoD Assessment Requirements.
- DFARS Clause 252.204-7021 Compliance with the Cybersecurity Maturity Model Certification Level Requirements.
