Form

We invite you to take part in this survey designed to assess your readiness for CMMC. All responses will remain strictly confidential. Before you begin, please be advised that a baseline knowledge of your IT and cybersecurity posture will be necessary to ensure we can provide an accurate assessment. We encourage you to participate even if there are questions you're uncertain about.

Has your organization addressed the cyber requirements of NIST 800-171 to date?*

Have you performed an internal Supplier Performance Risk Assessment?*

Are you currently relying on in-house staff or a third-party MSP (managed service provider) to perform your NIST / CMMC compliance?*

Do you currently utilize any SaaS tools that would be considered cloud service providers (Microsoft 365, Deltek, etc)? *

Do you have a system in place to centrally manage users (adds, removals, password changes) and endpoints/laptops (lockout timers, updates, etc)? *

Have you implemented the "principle of least privilege" in your file stores, including establishing a process to determine and grant users only the necessary access required for their tasks? *

Do you have a firewall in place, configured to allow only what is needed for business needs? *

Is there a training program in place for staff to ensure they are up to speed on cybersecurity and role-specific topics? *

Do you have a ticketing system or a change management system? *

Are you tracking Windows updates to your corporate laptops and third-party updates? *

Have you confirmed FedRAMP certification for your cloud service providers? *

Do you have multi-factored authentication deployed on any accounts where it is available? *

Do you have a tested incident response plan in place? *

Is there a documented onboarding plan for recruiting/hiring as well as an offboarding process?*

Do you perform risk & security assessments on a regular basis? *

Do you have any form of continuous monitoring in place for your network/laptops?*

Are you completing any form of vulnerability assessment on environmental assets? (laptops, firewalls, etc) *

First Name*

Last name*

Email*

Job Title*

Company name*

State US*

How many staff do you have today? *

Approximately what percentage of your business is with the DoD? *