Issue
A manufacturing and engineering firm producing specialty electric motors, generators, and energy storage products needed to meet strict standards to protect its eligibility for government contracting work. In particular, the business sought help meeting aspects of the Cybersecurity Maturity Model Certification (CMMC) program, preparing for NIST SP 800-171 revision 3 becoming the active standard, and ensuring the protection of Controlled Unclassified Information (CUI), among other compliance issues
Solutions
The CBIZ technology team mobilized to evaluate the company’s CMMC Level 2 posture, bring the handling of CUI in alignment with the requirements imposed on defense contractors, and create a plan for maintaining compliance with evolving NIST SP 800-171 requirements. The preliminary work included an analysis of the current CMMC scope, followed by a gap assessment to identify control deficiencies. Next, the CBIZ team carried out an evidence review to document compliance, developed a practical remediation plan for shortcomings, and designed a plan to future proof the business’ compliance program as NIST SP 800-171 revision 3 eventually becomes the new standard.
Outcome
After remediation efforts had been supported to conclusion, a CMMC Level 2 readiness assessment found the vast majority of practices in compliance with only four practices lagging. Building on the company’s well-developed program, the CBIZ team created an updated roadmap to comprehensive compliance that included new and modified controls, enhanced assessment objectives, and future remediation priorities. As a result, the company successfully passed a CMMC Level 2 certification assessment, and is equipped for compliance with evolving regulations, including the upcoming transition to NIST SP 800-171 revision 3.
| Company Information | |
|---|---|
| Industry | Manufacturing |
| Geographic Footprint | Minnesota |
| Number of Employees | 400+ |
| Years as a Client | 5 |
© Copyright CBIZ, Inc. All rights reserved. Use of the material contained herein without the express written consent of the firms is prohibited by law. This publication is distributed with the understanding that CBIZ is not rendering legal, accounting or other professional advice. The reader is advised to contact a tax professional prior to taking any action based upon this information. CBIZ assumes no liability whatsoever in connection with the use of this information and assumes no obligation to inform the reader of any changes in tax laws or other factors that could affect the information contained herein. Material contained in this publication is informational and promotional in nature and not intended to be specific financial, tax or consulting advice. Readers are advised to seek professional consultation regarding circumstances affecting their organization.
“CBIZ” is the brand name under which CBIZ CPAs P.C. and CBIZ, Inc. and its subsidiaries, including CBIZ Advisors, LLC, provide professional services. CBIZ CPAs P.C. and CBIZ, Inc. (and its subsidiaries) practice as an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable law, regulations, and professional standards. CBIZ CPAs P.C. is a licensed independent CPA firm that provides attest services to its clients. CBIZ, Inc. and its subsidiary entities provide tax, advisory, and consulting services to their clients. CBIZ, Inc. and its subsidiary entities are not licensed CPA firms and, therefore, cannot provide attest services.
