SecurityMetrics has added a guided self-assessment solution (CMMC Assess) for Level 2 Contractors to its suite of products for Primes, Level 1, and Level 2 Contractors. CMMC Assess makes CMMC less intimidating by outlining manageable compliance steps in a portal and by offering live support. CMMC Assess covers all 110 Level 2 security controls and can handle complex environments with multiple assignments and multiple CAGE codes. It provides real-time score tracking, identifies controls that qualify for POA&Ms, and auto generates a System Security Plan (SSP).
“CMMC compliance can be complicated, especially when contractors are juggling multiple assessments and CAGE codes,” said Marcus Clawson, Senior Product Manager at SecurityMetrics. “We saw a need in the market for a comprehensive guide, so we created CMMC Assess to give Level 2 Contractors confidence in their CMMC compliance process and an intuitive pathway to verification.”
Features:
- A company profile with compliance verification that is visible in real time to upper-tier contractors through SecurityMetrics CMMC Link
- A plain-language Level 2 Self-Assessment Portal covering all 110 Level 2 security controls
- Real-time SPRS scoring and progress tracking
- POA&M identification, tracking, and reporting with a summary view on the POA&M page
- Support for multiple CAGE codes & enclaves, for complex Level 2 environments
- An auto-generated System Security Plan (SSP)
- Live support from certified CMMC Registered Practitioners (RPs)
- An automated monthly compliance status email
Interested contractors can learn more about CMMC compliance and SecurityMetrics CMMC Assess by visiting the SecurityMetrics website at www.securitymetrics.com/product/cmmc.
About SecurityMetrics
SecurityMetrics secures peace of mind for organizations that handle sensitive data. From local shops to some of the world’s largest brands, SecurityMetrics helps businesses achieve data security with penetration testing, vulnerability scanning, gap analysis, security consulting, managed services and compliance mandates (CMMC, PCI, HIPAA, GDPR, HITRUST).
SecurityMetrics is a CMMC Certified Registered Provider Organization (RPO), PCI certified Approved Scanning Vendor (ASV), Qualified Security Assessor (QSA), PCI Forensic Investigator (PFI), and Managed Security provider with over 26 years of data security experience. They have tested over 100 million systems for data security and compliance. They are privately held and headquartered in Orem, Utah, where they maintain a Security Operations Center (SOC) and 24/7 multilingual technical support.
For press inquiries, email pr@securitymetrics.com.
Social (LinkedIn, X, FB, Instagram, YouTube): @SecurityMetrics