CMMC Gap Analysis

Are you navigating the complexities of CMMC compliance and worried about losing contracts or facing penalties?

You need a partner who can guide you through the nuances of CMMC. Our CMMC gap analysis provides a detailed review of your current security setup and helps you fix problems.

Find CMMC security gaps and develop an action plan – on time and on budget

With the stricter cybersecurity requirements of CMMC, you need to know what your security gaps are and provide accurate supporting documentation if you want to keep your defense contracts. With a gap analysis from E-N Computers, you get: 

  • A fresh perspective from one of our expert CMMC Registered Practitioners 
  • An accurate SPRS score 
  • Documentation in a top-tier GRC tool that you can understand and maintain

Our Registered Practitioners 

E-N Computers is a Registered Practitioner Organization with two Registered Practitioners certified by The CyberAB. All our RPs are experienced IT professionals with proven CMMC knowledge and skills. We’ll look at your systems with fresh eyes, knowledge of all 110 security controls, and familiarity with the most common pitfalls. You can be confident in the quality of your results. 

Get IT experience on your side

Our CMMC gap analysis is an affordable way to leap forward in your CMMC journey

20+

Years Delivering IT Solutions

70+

Organizations Served

Top 5

Managed Service Provider in Virginia

What you get with a gap analysis

Uncover your accurate SPRS score

Your SPRS score is your entire security setup distilled down to one number — and it needs to be as correct as possible. Your gap analysis includes these steps to create an accurate score: 

  • Decide what systems are in-scope for each CMMC level

  • Conduct a thorough review of your current security

  • Document your current security setup

  • Create a System Security Plan (SSP) and Plan of Action and Milestones (POA&M)

Get started with CMMC the right way

CMMC gap analysis consulting illustrated as man talking at table

An affordable alternative to ongoing consulting 

Our CMMC gap analysis is a short-term engagement of twelve one-hour sessions over a three-to-four-month period. Clients seeking CMMC Level 2 compliance can expect to spend about $3,000 on consultation plus $6,000 for one year of FutureFeed. If you’re not ready for comprehensive, ongoing CMMC consultation, a gap analysis is a great way to figure out your status and lay the groundwork for future efforts. 

CMMC Level 2 Controls in FutureFeed

Document and track your progress 

Tracking your compliance efforts is one of the biggest headaches of CMMC. We set you up for success by putting the results of your gap analysis in our favorite GRC tool.

With your compliance data in FutureFeed, you will be in a great position to develop a plan, track your progress toward compliance and prove what you did. 

Frequently asked questions about CMMC gap analysis

How long does it take to complete the entire CMMC process?

Gap analysis is a short-term project, usually three to four months, but the entire process of CMMC compliance can take more than a year. So, start early.  

What happens after the gap analysis?

  A gap analysis is followed by: 

  1. Gap remediation: You implement policies, procedures and systems to meet the CMMC standard. (This step alone will take one to two years.) 
  2. Choosing an assessor: Find a Certified Third-Party Assessor Organization (C3PAO).  These organizations are currently in short supply for the expected demand so find one early.  (If we work with you as a Registered Practioner, we can’t also do your assessment. But we can help you find a good assessor.) 
  3. Assessment: An assessment for a smaller business will cost between $25,000 and $50,000. 
  4. DoD submission: Submit your report to the DoD. You must meet at least 80% of the criteria to go on to the next step.  
  5. Compliance: Reach 100% compliance and become certified. You’ll have 180 days (about 6 months) to correct any issues. The CyberAB will issue you a certificate, which will be good for three years. 

Are there follow-up services?

Our ongoing services include CMMC consulting and managed services tailored to CMMC compliance 

 

How does the gap analysis relate to actual CMMC certification audits/assessments? 

You analyze and remediate gaps in your compliance before you work with an assessor. Assessment is expensive, so you’ll want to go into it with a reasonable expectation that you will pass. Thus, you need to work out your compliance issues during the gap analysis and remediation steps.  

Can the gap analysis be tailored to unique business needs or compliance concerns? 

Yes. This is why we want you to be deeply involved in the gap analysis process. You know your business, and you’ll be doing 75% of the work so that the analysis is tailored to you. We provide 25% of the work in the form of scoping guidance, knowledge of the security controls under review, and experience.  

How can I get up to speed on CMMC?

Like many government initiatives, CMMC is complicated and confusing. You can find answers to common questions about CMMC in our Learning Center. Here are some of them: 

IT maturity assessment

Not sure if you need help with your gap analysis?

Schedule a complimentary CMMC consultation

Talk with an experienced engineer who is also a CMMC Registered Practitioner

Still Have Questions?

Visit Our Learning Center!

How can we help?

Contact Us Today