The long-awaited CMMC Assessment Process (CAP) guide has just been released, and it includes detailed guidance on how to plan and prepare for a CMMC third-party assessment -- everything from how to initiate the process, to closing out your Plan of Action & Milestones and obtaining your certification.
While the process is still in V 1.0 and considered in "draft mode" the Department of Defense has set up an early-adopter voluntary assessment program to test out the process. Defense contractors who participate can go through the assessment process and have their certifications extended for 3 years AFTER the rules are finalized -- a nice head-start and extension!
CMMC expert Mike Semel attended the "Town Hall" meeting where the big news was announced, and has pored through the 40-page CAP document. During this breaking-news webinar, he will share with you all the details of the process, how you can participate in the early adoptor program, as well as some "gotchas" to watch out for.
Among the details that we'll cover are:
- How to start the process
- Roles and responsibilities required of your organization, and the company that will do your assessment
- Framing the Assessment Scope
- Impact of using an external cloud service provider
- Developing your assessment plan
- Identifying resources and determining your schedule
- How to verify readiness to conduct the assessment review
- Collecting and examining evidience of compliance
- Creating and working through your Plan of Actions & Milestones.
We'll also share with you how Compliance Manager GRC has been optimized for this early adopter program, and how it can help you prepare for the assessment, and streamline your path to certification.
