Addressing CMMC Requirements for Conglomerate

Executive Summary

Advised multi-industry conglomerate on how to address CMMC requirements and meet diverse technology needs of subsidiaries.

Company Type

Government Contractor ; Real Estate ; Retail

Company Size

$1 Billion / 5,000+ employees

Challenge

Client is a large organization with multiple subsidiaries across various industries including federal government contracting, real estate, and retail stores. They asked for an assessment of how their centralized IT function was serving their disparate businesses and the potential impact of CMMC requirements on the company.

Tasks Performed

  • Interviewed stakeholders across the organization to develop a multi-dimensional view of technology strengths and weaknesses
  • Developed recommendation on how to augment centralized IT function with specialty technology skills where needed (e.g. to address CMMC requirements for federal government contractor subsidiary)
  • Provided overview of CMMC 2.0 requirements and steps required to comply with certification
  • Developed and delivered training to Board of Directors on their role/responsibilities for cybersecurity governance 

Outcome

The client decided to develop a technology enclave for their federal subsidiary to address CMMC requirements in a cost effective manner and avoid burdening the rest of the organization with unnecessary compliance requirements.

Use Case

Technology Gap Assessment

Project Duration

3 months