• Achieving CMMC certification is challenging all on its own, “sleeping” on maintenance and sustainment and assuming you have a “3-year vacation” before readdressing CMMC, is a recipe for disaster.
• VXE is your vanguard for the 1st half of the battle and your agent for the 2nd half, by actively maintaining your security posture up to date and in the hands of VXE experts.

The CMMC Ecosystem is comprised of four roles:

1. Defense Industry Base (DIB) Contractors
2. Consultants & Implementation
3. Assessing & Certification
4. Training & Instructors

• Leveraging Apptega, VXE addresses all applicable security objectives, derived from scoping the network & corresponding CMMC maturity level, required for your business.
• Each objective will be implemented with CyberAB’s assessment objects & methods in mind, while ensuring VXE’s efforts are both precise & lightweight, limiting impact to business operations.

• Model: 17 practices
• Assessments: Annual Self-Assessment

• Model: 110 practices based on NIST SP 800-171
• Assessments: Triennial Third-Party

• Model: 110+ practices based on NIST SP 800-172
• Assessments: Triennial Gov’t-led

Title 48 CFR -204.75

Key Takeaways

The contracting officer shall include in the solicitation the required CMMC level, if provided by the requiring activity. Contracting officers shall not award a contract, task order, or delivery order to an offeror that does not have a current (i.e., not more than 3 years old) CMMC certificate at the level required by the solicitation.

Title 48 CFR – 252.204.7021

Key Takeaways

(b) Requirements: The Contractor shall have a current (i.e. not older than 3 years) CMMC certificate at the CMMC level required by this contract and maintain the CMMC certificate at the required level for the duration of the contract.
(c) Subcontracts: The Contractor shall: Prior to awarding to a subcontractor, ensure that the subcontractor has a current (i.e., not older than 3 years) CMMC certificate at the CMMC level that is appropriate for the information that is being flowed down to the subcontractor.