Accelerated CMMC Compliance for a Virginia-Based Acquisition Support Contractor

With 200+ employees and a newly acquired manufacturing company, this contractor faced urgent deadlines to achieve CMMC Level 2 compliance. InterSec employed its CMMC accelerators and rigorous NIST 800-171 approach to unify both organizations under a single compliant framework.

Download Case Study

Background

An acquisition support firm serving the Department of Defense, the client expanded by purchasing a smaller manufacturer. They needed to integrate disparate IT environments and security policies to maintain critical DoD contracts.

The Client

A Defense Contracting Company

Industry

Defense

The Challenge

Integration Difficulties: Newly acquired employees were off the parent’s Active Directory, complicating identity management.
Policy Inconsistencies: Different security practices across merged entities hindered uniform compliance.
Time-Sensitive Requirements: Defense contract renewals required swift, demonstrable adherence to CMMC Level 2.

Approach and Strategy

CMMC Accelerators: Used pre-built templates, checklists, and best practices for faster gap identification.
Phased Remediation: Aligned policy, user provisioning, and technical controls in structured stages.
ISO 9001 & CMMI Services Maturity: Leveraged quality management frameworks to keep milestones on track.

Solution & Implementation

Detailed Current-State Analysis
- Audited both organizations to assess existing controls and pinpoint compliance gaps.
Remediation Plan Execution
- Updated policies and supplemental documents to unify standards; enforced MFA and vulnerability scanning.
User Integration
- Migrated the acquired staff into the parent’s AD environment, ensuring consistent access management.

Results / Outcomes

SPRS Score of 110: Met CMMC Level 2 standards and safeguarded critical defense contracts.
Seamless Acquisition Integration: Merged users, processes, and systems under one compliant infrastructure.
Timely Documentation Upload: Successfully entered all compliance details into SPRS before the DoD renewal deadline.

Lesson Learned

Field-Tested CMMC Approach: InterSec’s readiness framework minimized typical compliance roadblocks.
Scalable Model: The standardized approach can be replicated for future acquisitions, simplifying subsequent integrations.
Cross-Organizational Alignment: Unified policies and procedures fostered a cohesive security culture.