CMMC Implementation Consulting
Full Lifecycle Consulting
Full Preparation for CMMC Assessment Process (CAP)
Managed CMMC Adherence
Fully Custom CMMC Status Portal
CMMC Compliant Managed Security Services
What is CMMC and Who Needs It?
The Cybersecurity Maturity Model Certification (CMMC) is a framework developed by the Department of Defense (DoD) to enhance the cybersecurity posture of companies within the Defense Industrial Base (DIB). It establishes structured maturity levels, ensuring that businesses handling Controlled Unclassified Information (CUI) and Federal Contract Information (FCI) meet standardized security requirements.
Who Needs CMMC Compliance?
- Defense Contractors & Subcontractors – Any organization that works with the DoD and handles CUI or FCI must achieve CMMC compliance to maintain and acquire contracts.
- Manufacturers & Suppliers – Companies providing materials, components, or equipment for defense-related projects must adhere to cybersecurity regulations.
- IT & Service Providers – Managed service providers (MSPs), cloud service providers (CSPs), and other vendors supporting DoD contractors must ensure compliance with CMMC guidelines.
- Research Institutions – Universities and labs working on DoD-funded research must implement CMMC controls to protect sensitive data.
Serving the Defense Industrial Base (DIB)
Rolle IT provides consultative preparation services to Organizations Seeking Assessment (OSA) for CMMC.
Work with Rolle IT's Certified CMMC Professionals (CCPs) and Registered Practitioners (RPs) to prepare your organization for your CMMC Assessment.
With You On Your CMMC Journey
Rolle IT works with clients to craft deliverables to meet CMMC Requirements. Our CMMC expertise combined with client's organizational expertise allows us to find the most efficient way to achieve CMMC Compliance in client environments.
![vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-08](/wp-content/uploads/2024/03/vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364-Converted-08-300x222.png "vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-08"){kind=icon}
Gap Assessment
Evaluate current cybersecurity practices to identify areas of non-compliance and prioritize remediation efforts.
![vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-02](/wp-content/uploads/2024/03/vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364-Converted-02-150x150.png "vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-02"){kind=icon}
Shared Responsibility Matrix
Clear Boundaries and Expectations between Rolle IT and Clients
![vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-10](/wp-content/uploads/2024/03/vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364-Converted-10.png "vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-10"){kind=icon}
Detailed Documentation
Rolle IT will work with clients to provide detailed documentation for each control.
![vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-17](/wp-content/uploads/2024/03/vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364-Converted-17.png "vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-17"){kind=icon}
Open Communication
Open Communication with clients. Real Time Dashboard insights shared with client.
![vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-12](/wp-content/uploads/2024/03/vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364-Converted-12-1.png "vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-12"){kind=icon}
CMMC Continunity
Partnerships and MSSP Support CMMC continuity for Triennial Assessment or environment updates
![vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-01](/wp-content/uploads/2024/03/vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364-Converted-01-207x300.png "vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-01"){kind=icon}
CUI Enclave
Custom CUI Enclaves and third-party solutions to achieve CMMC
![vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-13](/wp-content/uploads/2024/03/vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364-Converted-13-1.png "vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-13"){kind=icon}
SSP
Rolle IT can work with clients to create security controls, procedures, and policies to meet CMMC requirements.
![vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-13](/wp-content/uploads/2024/03/vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364-Converted-13.png "vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-13"){kind=icon}
POAMs
Rolle works with clients to create and remediate POAMs, addressing cybersecurity deficiencies identified in a GAP assessment, detailing timelines and responsible parties for remediation.
Ongoing MSSP and MSP IT Support You Can Trust with Rolle IT Cybersecurity
Rolle IT is proud to assist with Cybersecurity Maturity Model Certification preparation. Rolle IT employs subject matter expert CMMC Certified CMMC Professionals (CCP) and Registered Practitioners (RP) ready to enable your organization to obtain your CMMC certification.
CMMC 2.0 Levels
Level 1
Foundational
Based on Basic Cybersecurity Practices
Annual Self-Assessment
Level 2
Advanced
110 Cybersecurity Practices Aligned With NIST SP 800-171
Triannual Third-Party Assessments for Critical NSI; Annual Self- Assessment for Select Programs
Level 3
Expert
Level 2 augmented by NIST SP 800-172
Tri-Annual Government Led Assessments
NEWS & Resources:
Feb 2025: FAR CUI Rule: DoD, GSA, and NASA are proposing to amend the Federal Acquisition Regulation (FAR) to implement the National Archives and Records Administration's Controlled Unclassified Information Program enacted under an Executive Order entitled Controlled Unclassified Information.
Jan 17, 2025 DoD Memo: How to we know if CMMC applies to us?
December 16, 2024
32 CFR CMMC rule, now officially published in the Federal Register.
Department of Defense About CMMC
Notice to the CMMC Ecosytem from CyberAB
Federal Register Final CMMC Rule
September 13, 2024
CMMC: OIRA Conclusion of EO 12866 Regulatory Review
The CMMC rule (32 CFR) has completed its final review, marking a key step towards making CMMC an effective program.
The next step is its publication in the Federal Register, which could happen soon and will initiate a up to 60-day congressional review period, after which the rule will take effect.
Indicators point to the review period moving faster than the 60 days allotted, which means that CMMC may be effective before the end of the year.
June 27, 2024
TITLE: Cybersecurity Maturity Model Certification (CMMC) Program
STAGE: Final Rule
Office of Information and Regulatory affairs has the CMMC Program in for Final Rule.
June 24, 2024
CMMC: Coming Soon to DOD contracts near you!
OIRA Conclusion of EO 12866 Regulatory Review
Title: Assessing Contractor Implementation of Cybersecurity Requirements (DFARS Case 2019-D041) Concluded Date: 08/07/2024
May 14, 2023
NIST released revisions for NIST SP 800-171 r3 and NIST SP 800-171A r3 May 14, 2024
- 46 Significant Changes
- 19 New Requirements
- More Control Families
- Increased the specificity of security requirements to remove ambiguity, improve the effectiveness of implementation, and clarify the scope of assessments
- Schedule time with our team to see how this revision may impact your System Security Plan. (CMMC@RolleIT.com)
Assessing Security Requirements for Controlled Unclassified Information (nist.gov)
Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations (nist.gov)
Defense Department Releases Companion Video for CMMC Public Comment Period Feb 15, 2024
Rolle IT CMMC 2.0 & DIB Support Capabilities
24/7 Help Desk Managed Service Provider for CMMC Compliant Entities
Our CMMC Team
Our CMMC Team is led by a former NSA Cybersecurity expert who focuses on compliance as a minimum and security and function as a nonnegotiable.
Our team has robust cybersecurity backgrounds and experience, fortifying our services for clients. Each of our CMMC team members focuses on training and staying current on CMMC news and advocacy. Rolle IT exclusively has Cyber AB certified professionals working with clients for CMMC purposes.
Rolle IT is an active participant in CMMC Advocacy groups to be best prepared to serve clients. As a fellow DoD contractor, Rolle IT is subject to the same CMMC requirements as the partners and clients we serve.
Rolle IT employs Veterans as Registered Practitioners for CMMC Consulting.
Rolle IT, LLC is currently supporting numerous projects under the Department of Veterans Affairs Transformation Twenty-One Total Technology-Next Generation (T4NG). Rolle IT has past performance supporting Veterans Benefits Administration VBA and the Veterans Health Administration VHA.
FAQ
What Is CMMC?
The Cybersecurity Maturity Model Certification is a cybersecurity standard that will be on DoD contracts. CMMC 2.0 is broken down into 3 levels of certification ranging from basic (Level 1) to advanced (Level 2).
What if we Don’t Handle CUI? Do we Still Need to be Certified?
Its likely that all companies doing business with Department of Defense will need to obtain CMMC. All of Level 1 requirements as well as some of Level 2 will need to complete an annual self-assessment, while the rest of Level 2 and Level 3 will need to undergo either a third-party assessment (a subset of Level 2) or a government led assessment (Level 3).
Even if you are a subcontractor.
Especially if you are an External Services Provider to the Defense Industrial Base.
Who does CMMC Impact?
The CMMC level mandated will be stated in the contract information. The majority of contracts will require a Level 1 or Level 2 compliance.
Contracts with FCI exclusively: CMMC Level 1 compliance requirements.
Contracts with CUI: CMMC Level 2 will be required as a minimum.
What are the Costs Associated with CMMC?
Costs vary widely depending on your infrastructure, internal capabilities and goals. To discuss your CMMC requirements and schedule a complimentary 30 min consultation, email us at cmmc@rolleit.com or call 321-872-7576.
What people say about us
Rolle IT has been fabulous to work with. They assisted us with rebuilding our website and moving all our data from our old system into office 365 seamlessly.
Rebecca Alpizar
Brevard County Bar
Before Rolle IT we couldn't work remotely. Then Covid hit and we knew we needed some real help. Rolle IT was able to come in and migrate all our system's into Office 365 and move all our data into Azure. We couldn't be happier
Jay Thakkar
Attorney at Law
NAICS Codes
- 541511 - Custom Computer Programming Services
-
541512 - Computer System Design Services
- 511210 - Software Publishing
- 541519 - Other Computer Related Services
- 541611 - Administrative Management and General Management Consulting
- 541211 - Offices of certified public accountants
- 921190 - Other General Government Support
- 541614 - Process, Physical Distribution, and Logistics Consulting
- 541715 - R&D in the Physical, Engineering, and Life Sciences
3700 N Harbor City Blvd Suite 2D Melbourne, FL 32935
AVAILABLE 8AM TO 6PM Monday - Friday
CONNECT WITH US
LET’S GET IN TOUCH
If you have any questions or concerns, we encourage you to reach out to us. You can easily get in touch by filling out the form below. Our team of experienced professionals is here to help, and we will do our best to address your needs and concerns in a timely and efficient manner. CMMC@Rolleit.com