CMMC Compliance
We’ve Been Through It Ourselves
Keystone has achieved a CMMC Status of Final Level 1 (Self), meeting all 15 Level 1 security requirements for protecting Federal Contract Information. We renew our self-assessment and executive affirmation every year through the Department of Defense’s Supplier Performance Risk System (SPRS).
We don’t just talk about CMMC. We live it in our own business.
What CMMC Means for Your Business
The Cybersecurity Maturity Model Certification (CMMC) program is how the Department of Defense makes sure its contractors and suppliers protect sensitive information. If your business handles Federal Contract Information on a DoD contract or subcontract, CMMC requirements can show up in your contracts.
For many manufacturers and suppliers, that’s a new kind of pressure on top of running the business. You don’t have to figure it out alone.
Support for Your CMMC Journey
Many CMMC Level 1 requirements come down to strong, everyday IT practices, and that’s exactly what we manage for our clients. We keep your environment secure, built and supported by a team that understands what CMMC expects.
Whether you’re just hearing about CMMC or already working toward it, we’ll be a knowledgeable partner alongside you.
How We Help Protect Your Business
The right people get to the right systems and data, and no one else.
Systems kept current with security updates so known weaknesses get closed fast.
Every device protected, monitored and scanned for threats.
Traffic in and out of your network monitored and controlled.
Why Keystone
We’ve supported Northeast Ohio businesses for more than 30 years, including many local manufacturers. Our vCIOs help you plan technology decisions with the bigger picture in mind, and our team treats your business as if it were our own.
“With Keystone, we solved not only our IT needs, but we now have a consistent cost that we can budget for. Plus, we can direct our attention now to the needs of the business!”
– Brian Miller, President and CEO, V&S Galvanizing
“We didn’t have the platform and skillset to move forward with our growth strategy. That is why we chose Keystone. We achieved that. We are set up to do that – and are doing that now!”
– Ron Angelilli, CMA, CPC, Chief Operating Officer, Heritage Cooperative
“I was expecting to be down for weeks, but it never happened. There was no down time. Everything kept flowing and improving. Changing to Keystone was the best move I ever made. No regrets, they’re fantastic!”
– Vera Hall, President, Halls Exclusive Courier
“I just could not keep up with the advances and threats in technology. And, the day to day user needs were keeping me from the critical aspects of my main role to grow the company. Keystone has solved those issues for me and our growth is back on track!”
— Joe Giustino, Sales Manager, Akron Dispersions
CMMC Questions? We’ve Got Answers.
It’s the baseline for companies that handle Federal Contract Information: 15 security requirements from FAR 52.204-21, a self-assessment every year, and a senior official affirming the results in SPRS. One catch: there’s no partial credit. Every requirement has to be fully met.
If you hold or bid on DoD contracts or subcontracts that involve FCI, CMMC may show up in your solicitations or get flowed down from your prime contractor. Your contracts, contracting officer or prime can tell you exactly which level applies.
Yes. We hold a CMMC Status of Final Level 1 (Self), and we renew our self-assessment and affirmation in SPRS every year. We practice what we preach.
That one’s yours. Your self-assessment and affirmation belong to your business, and a senior official at your company signs off. What we bring is the IT behind many of the requirements, like access control, patching, malware protection and network security, so your environment is in great shape when you sit down to do it.
Level 2 is for businesses that handle Controlled Unclassified Information (CUI). It has 110 requirements based on NIST SP 800-171 and often requires a third-party assessment. If your contracts involve CUI, let’s talk about what that means for your IT.
Absolutely. We’ve supported Northeast Ohio businesses for more than 30 years, including plenty of local manufacturers.
Easy. Fill out our contact form and we’ll reach out within one business day. Then we’ll come on site for an IT assessment and hand you a full technology roadmap. No cost, no obligation.
Let’s Talk About CMMC
Not sure where your business stands with CMMC? Start the conversation and we’ll talk it through together.