End-to-End CMMC Compliance Consulting for DoD Contractors

In the last few years, we’ve helped hundreds of Federal contractors throughout the U.S. navigate the complexities of DFARS, NIST 800-171, and now CMMC. And we can help you streamline your CMMC compliance journey with our expert guidance and support.
Get started with a free consultation

Need more information on CMMC? Read our latest CMMC Guide to know everything about CMMC 2.0

Why do DIBs choose InterSec as a CMMC Compliance partner?

  • InterSec brings a rigorous CMMI Services Level 3 mature service delivery process and ISO 9001 quality management to our CMMC services.

  • InterSec is a CMMC-AB RPO with many seasoned RPs and assessors.

  • A prime contractor on the Virginia GENEDGE CMMC services BPA, so you can count on us as a vetted CMMC compliance service provider.

  • A dedicated team of security professionals is available throughout the CMMC compliance process.

  • Strategic partnerships and alliances with product vendors to provide turnkey and cost-effective solutions to meet CMMC compliance.

  • Multiple services and price models that can be easily customized to meet your organization's unique needs.

Contact our CMMC Experts
Rapid CUI scoping to right-size your CMMC compliance efforts
Discounted CMMC Level 2 Gap Assessment
Expertise in CMMC Technical Remediation
CMMC audit-ready artifacts for quick turnaround
CMMC Pre-audit to baseline the existing cybersecurity readiness
MSSP services for ongoing CMMC compliance
Hundreds of DFARS assessments and readiness experience

Our approach to CMMC Compliance

Assess

CMMC Gap Assessment
  • Scoping to evaluate applicable CMMC Level
  • Identify CUIs, FCIs
  • Establishing existing cybersecurity maturity
  • Assess compliance
  • SPRS Evaluation
  • POA&Ms with actionable remediation guidance

Defend

Remediation
  • Documentation and technical remediation
  • Establishing existing cybersecurity maturity
  • Assess compliance
  • SPRS Score
  • POA&M
  • System Security Plan
  • Actionable Remediation Report

Secure

Ongoing Monitoring
  • Periodic Policies and Procedures reviews and updates
  • Incident Response Table Top Exercise
  • Annual Phishing Exercises
  • Security Awareness Training
  • Periodic Vulnerability Scan
  • SPRS score updates

Our Clients

We have served many Federal agencies, Contractors, and large enterprises with their compliance needs.
170+
NIST 800-171 SSP,
POA&M, and SPRS
200+
Level 1 Advisory and consulting
50+
Level 2 Advisory, Consulting, and MSSP
Request a free CMMC Consultation
Schedule a Calendly MeetingInquire about CMMC Consulting

Case Studies

Here's how we've helped businesses overcome challenges and achieve their goals.

Unleashing cybersecurity success: How InterSec helps a manufacturing company meet CMMC requirements with ease

Introduction
Problem
Solution
Methodology
Results
Conclusion
A Virginia-based manufacturing company was facing challenges in meeting the Cybersecurity Maturity Model Certification (CMMC) Level 2 requirements set forth by the Department of Defense. The company had limited IT resources and was hesitant about using cloud services.
The company was struggling to meet the CMMC requirements due to its limited IT resources, lack of dedicated IT staff, and use of outdated technology. Additionally, the company was cautious about using cloud services to store sensitive information.
InterSec was referred to the company to help them achieve CMMC compliance. InterSec engaged the company's executive management, educated the company's staff, and defined roles and responsibilities for information security. InterSec then utilized its NIST 800-171/CMMC field-tested readiness methodology to ensure a successful CMMC compliance milestone.
This is some text inside of a div block.
Controlled Unclassified Information (CUI) scoping
Gap analysis
A current state analysis of the client's organization security
Development of a remediation plan
Policies and procedures development
Technical remediation services, including asset management, multi-factor authentication, vulnerability scanning, email encryption, drive encryption, and virtual private network
InterSec is able to quickly remediate and improve the company's security posture, resulting in an SPRS score of 110. The client subsequently requested our Managed Security Service Provider (MSSP) services to maintain CMMC compliance.
InterSec's well-defined methodology, streamlined project execution, and expertise made the project a success, helping the company achieve the CMMC requirements and secure its systems. The company can now continue serving the defense industry while minimizing potential security risks.

Accelerating CMMC compliance: A Virginia-based acquisition support contractor's success story with InterSec

Introduction
Problem
Solution
Methodology
Results
Conclusion
A Virginia-based Acquisition Support contractor with 200+ employees was facing challenges in meeting the Cybersecurity Maturity Model Certification (CMMC) Level 2 requirements set forth by the Department of Defense. With two office locations and a recent acquisition of a small manufacturing company, the contractor needed to comply with a defense contract and improve their SPRS score to 110.
The contractor faced a complex task of integrating the acquired company employees into its existing systems, and employees were not on the parent company's Active Directory which made it harder to enforce CMMC policies and procedures.
InterSec came to the rescue with its innovative approach to CMMC compliance, leveraging its CMMC accelerators and field-tested NIST 800-171/CMMC methodology to assess the current state and develop a remediation plan. The plan was executed by creating policies, procedures, supplement documents, and providing technical remediation services.
InterSec brought a rigorous CMMI Services Level 3 mature service delivery process and ISO 9001 quality management to CMMC services, conducted an assessment, developed a remediation plan, implemented policies/procedures, provided technical remediation services, integrated the acquired company, prepared documentation, and executed the project using their NIST 800-171/CMMC field-tested readiness methodology, resulting in a successful outcome for the customer.
The contractor's SPRS score improved to 110, the acquisition was seamlessly integrated into the parent company's systems, and all required documentation was uploaded into the SPRS system ahead of the deadline, meeting the customer's CMMC compliance requirements.
InterSec's innovative approach and experienced team helped the contractor achieve CMMC compliance and secure their systems, ensuring their ability to serve the defense industry while minimizing security risks. The well-defined methodology and field-tested approach to execution made the project a resounding success.

Testimonials

Here is what some of our customers say about our Cybersecurity Services

InterSec has provided us with many cybersecurity servicesthat includes CMMC compliance and Penetration Testing. We see them as a partnerfor the long run.

P. Dharia

CTO / Navitas Business Consulting

Their Pentest reports are very polished, well organized, and to the point. It helped us prioritize our resources to address the findings. We Would highly recommend InterSec.

G.Rajagopalan

Partner / SamBuq

InterSec has been providing MSSP services to us. They are very responsive and able to provide us support whenever we need. They went beyond the scope and helped us.

W. Dawkins

Vice President / Arrikai, LLC

InterSec provided top-notch services for a comprehensive security assessment. With their help, we are implementing a high security standard to secure our mission.

Confidential

Director of Security / A Maryland State Agency

Frequently Asked Questions

Here are some questions frequently asked by DIB Contractors about CMMC Compliance

Does CMMC apply to me?

If you are a DoD supplier and have FCI (Federal Contract Information) or CUI (Controlled Unclassified Information) in your contracts, you will be required to become CMMC Compliant.

What CMMC level do I need?

The level necessary depends on whether the company is dealing with CUI or FCI. FCI would require the company to complete level 1, and dealing with CUI would require the company to have achieved level 2.

When will CMMC requirements start appearing in solicitations?

It is predicted that in the Department of Defense's timeline, CMMC requirements could appear in solicitations in May this year. Currently, CMMC compliance is a soft requirement, so some solicitations may allow you to bid even if you don't have your SPRS score reported. Still, once the rule-making is completed, CMMC compliance will become mandatory to bid or accept contract awards.

How long does it take to get CMMC certified?

The Department of Defense estimates it takes 9 to 24 months to become CMMC-certified. The first level may take 1 to 3 months, the second level may take 6 to 18 months, and the third level would take 9 to 24 months.

What if I don't comply with CMMC requirements?

If you don't comply with CMMC, you will lose out on DoD business. Besides that, if you falsely claim to be CMMC Compliant while you are not, you may have to pay heavy penalties under FCA (False Claim Act.)

How much does CMMC Compliance cost?

The CMMC assessment costs will depend upon several factors, including which CMMC level your company is trying to achieve and the complexity of the DIB company's unclassified network for the certification boundary. A fair estimate can range between USD 250 and USD 7500 per seat for CMMC Level 2 and Level 3.

About InterSec

InterSec Inc., a Virginia corporation founded in 2013, is a one-stop cybersecurity service provider to small and medium-sized businesses.

As one of the boutique cybersecurity providers, InterSec employs continuous cyber innovation, sophisticated tradecraft, and top talent to deliver results.

Our diverse clients span Commercial, State, and Federal agencies. Our deep cyber and industry expertise is earned through hands-on experience, from Cybersecurity Program setup to Operational Security.

Our cyber security services meet mission-critical objectives in a secure and compliant manner.

We bring CMMI Level 3 and ISO 9001 mature and quality processes to CMMC service delivery. Our CMMC accelerators and white-glove services are field-tested. So it helps you become CMMC compliant on time and on budget.

Our deep engagement with the DoD, CMMC-AB, nationwide PTACs, MEPs, industry groups, partners, and vendors uniquely positions us to know “what right looks like” to be CMMC Level compliant for DIBs as well as Federal Contractors in general.

Our bespoke solutions and services save your company valuable time, resources, and money in achieving CMMC compliance.

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.