CMMC Implementation Consulting
Experienced Registered Practitioners (RP)
Full Preparation for CMMC Assessment Process (CAP)
Managed CMMC Adherence
Serving the Defense Industrial Base (DIB)
Rolle IT provides consultative preparation services to Organizations Seeking Certification (OSC) for CMMC. Work with Rolle IT's Registered Practitioners (RP) to prepare your organization for your CMMC Assessment.
NEWS & Resources:
September 13, 2024
CMMC: OIRA Conclusion of EO 12866 Regulatory Review
The CMMC rule (32 CFR) has completed its final review, marking a key step towards making CMMC an effective program.
The next step is its publication in the Federal Register, which could happen soon and will initiate a up to 60-day congressional review period, after which the rule will take effect.
Indicators point to the review period moving faster than the 60 days allotted, which means that CMMC may be effective before the end of the year.
June 27, 2024
TITLE: Cybersecurity Maturity Model Certification (CMMC) Program
STAGE: Final Rule
Office of Information and Regulatory affairs has the CMMC Program in for Final Rule.
June 24, 2024
CMMC: Coming Soon to DOD contracts near you!
OIRA Conclusion of EO 12866 Regulatory Review
Title: Assessing Contractor Implementation of Cybersecurity Requirements (DFARS Case 2019-D041) Concluded Date: 08/07/2024
May 14, 2023
NIST released revisions for NIST SP 800-171 r3 and NIST SP 800-171A r3 May 14, 2024
- 46 Significant Changes
- 19 New Requirements
- More Control Families
- Increased the specificity of security requirements to remove ambiguity, improve the effectiveness of implementation, and clarify the scope of assessments
- Schedule time with our team to see how this revision may impact your System Security Plan. ([email protected])
Assessing Security Requirements for Controlled Unclassified Information (nist.gov)
Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations (nist.gov)
Defense Department Releases Companion Video for CMMC Public Comment Period Feb 15, 2024
Deliverables & Details
Rolle IT works with clients to craft deliverables as needed. Our CMMC expertise combined with client's organizational expertise allows us to find the most efficient way to achieve CMMC Compliance in client environments.
![vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-02](/wp-content/uploads/2024/03/vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364-Converted-02-150x150.png "vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-02"){kind=icon}
Shared Responsibility Matrix
Clear Boundaries and Expectations between Rolle IT and Clients
![vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-12](/wp-content/uploads/2024/03/vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364-Converted-12-1.png "vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-12"){kind=icon}
CMMC Continunity
Partnerships with clients ensure CMMC continuity for Triennial Assessment.
![vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-08](/wp-content/uploads/2024/03/vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364-Converted-08-300x222.png "vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-08"){kind=icon}
Gap Assessment
Evaluate current cybersecurity practices to identify areas of non-compliance and prioritize remediation efforts.
![vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-01](/wp-content/uploads/2024/03/vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364-Converted-01-207x300.png "vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-01"){kind=icon}
CUI Enclave
If needed, Rolle IT can build a CUI Enclave to achieve CMMC
![vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-10](/wp-content/uploads/2024/03/vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364-Converted-10.png "vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-10"){kind=icon}
Detailed Documentation
Rolle IT will work with clients to provide detailed documentation for each control.
![vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-13](/wp-content/uploads/2024/03/vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364-Converted-13-1.png "vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-13"){kind=icon}
SSP
Rolle IT can work with clients to create security controls, procedures, and policies to meet CMMC requirements.
![vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-17](/wp-content/uploads/2024/03/vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364-Converted-17.png "vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-17"){kind=icon}
Open Communication
Open Communication with clients. Real Time Dashboard insights shared with client.
![vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-13](/wp-content/uploads/2024/03/vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364-Converted-13.png "vecteezy_a-collection-of-frequently-used-essential-icons-suitable_3706364 [Converted]-13"){kind=icon}
POAMs
Rolle works with clients to create and remediate POAMs, addressing cybersecurity deficiencies identified in a GAP assessment, detailing timelines and responsible parties for remediation.
Rolle IT is proud to assist with Cybersecurity Maturity Model Certification preparation. Rolle IT employs subject matter expert CMMC Registered Practitioners (RP) ready to enable your organization to obtain your CMMC certification.
CMMC 2.0 Levels
Level 1
Foundational
Based on Basic Cybersecurity Practices
Annual Self-Assessment
Level 2
Advanced
110 Cybersecurity Practices Aligned With NIST SP 800-171
Triannual Third-Party Assessments for Critical NSI; Annual Self- Assessment for Select Programs
Level 3
Expert
Level 2 augmented by NIST SP 800-172
Tri-Annual Government Led Assessments
Rolle IT CMMC 2.0 & DIB Support Capabilities
24/7 Help Desk Managed Service Provider for CMMC Compliant Entities
Ongoing MSSP and MSP IT Support You Can Trust with ProDesk
Rolle IT is able to provide ongoing IT support at any level to CMMC compliant organizations.
24/7 Help Desk based out of Space Coast Florida, 100% e-verified employees.
Tier 1, Tier 2, and Tier 3 in house response capabilities to support organizations, allowing you to remain focused on your business.
Custom solutions for IT Support with unique needs and capabilities of federal contracting companies in mind.
Our CMMC Team
Our CMMC Team is led by a former NSA Cybersecurity expert who focuses on compliance as a minimum and security and function as a nonnegotiable.
Our team has robust cybersecurity backgrounds and experience, fortifying our services for clients. Each of our CMMC team members focuses on training and staying current on CMMC news and advocacy. Rolle IT exclusively has Cyber AB certified professionals working with clients for CMMC purposes.
Rolle IT is an active participant in CMMC Advocacy groups to be best prepared to serve clients. As a fellow DoD contractor, Rolle IT is subject to the same CMMC requirements as the partners and clients we serve.
Rolle IT employs Veterans as Registered Practitioners for CMMC Consulting.
Rolle IT, LLC is currently supporting numerous projects under the Department of Veterans Affairs Transformation Twenty-One Total Technology-Next Generation (T4NG). Rolle IT has past performance supporting Veterans Benefits Administration VBA and the Veterans Health Administration VHA.
FAQ
What Is CMMC?
The Cybersecurity Maturity Model Certification is a cybersecurity standard that will be on DoD contracts. CMMC 2.0 is broken down into 3 levels of certification ranging from basic (Level 1) to advanced (Level 2).
What if we Don’t Handle CUI? Do we Still Need to be Certified?
Its likely that all companies doing business with Department of Defense will need to obtain CMMC. All of Level 1 requirements as well as some of Level 2 will need to complete an annual self-assessment, while the rest of Level 2 and Level 3 will need to undergo either a third-party assessment (a subset of Level 2) or a government led assessment (Level 3).
Even if you are a subcontractor.
Especially if you are an External Services Provider to the Defense Industrial Base.
Who does CMMC Impact?
The CMMC level mandated will be stated in the contract information. The majority of contracts will require a Level 1 or Level 2 compliance.
Contracts with FCI exclusively: CMMC Level 1 compliance requirements.
Contracts with CUI: CMMC Level 2 will be required as a minimum.
What are the Costs Associated with CMMC?
Costs vary widely depending on your infrastructure, internal capabilities and goals. To discuss your CMMC requirements and schedule a complimentary 30 min consultation, email us at [email protected] or call 321-872-7576.
What people say about us
Rolle IT has been fabulous to work with. They assisted us with rebuilding our website and moving all our data from our old system into office 365 seamlessly.
Rebecca Alpizar
Brevard County Bar
Before Rolle IT we couldn't work remotely. Then Covid hit and we knew we needed some real help. Rolle IT was able to come in and migrate all our system's into Office 365 and move all our data into Azure. We couldn't be happier
Jay Thakkar
Attorney at Law
NAICS Codes
- 541511 - Custom Computer Programming Services
-
541512 - Computer System Design Services
- 511210 - Software Publishing
- 541519 - Other Computer Related Services
- 541611 - Administrative Management and General Management Consulting
- 541211 - Offices of certified public accountants
- 921190 - Other General Government Support
- 541614 - Process, Physical Distribution, and Logistics Consulting
- 541715 - R&D in the Physical, Engineering, and Life Sciences
3700 N Harbor City Blvd Suite 2D Melbourne, FL 32935
AVAILABLE 8AM TO 6PM Monday - Friday
CONNECT WITH US
LET’S GET IN TOUCH
If you have any questions or concerns, we encourage you to reach out to us. You can easily get in touch by filling out the form below. Our team of experienced professionals is here to help, and we will do our best to address your needs and concerns in a timely and efficient manner. [email protected]