Service Line

CMMC & NIST 800-171 Readiness

Compliance consulting, gap assessments, and implementation support for defense contractors handling CUI and FCI.

Book a Consultation
Verified Procurement Credentials

Credentials & Status

Verified Commonwealth of Virginia SWaM designations and SAM.gov active federal registration.

Legal Business Name

Emerging Defense Solutions, LLC

SAM.gov Unique Entity ID (UEI)

KDPGFA7EN9C5

CAGE Code

23R09

SAM.gov Registration Status

Active & Certified

Primary NAICS Codes

541512 (Primary) | 611699 | 561612 | 541199

Small Business Status

VA SWaM Certified (#846748)

VA SWaM Certified (#846748)SDVOB (Service-Disabled Veteran-Owned)MBE (Minority-Owned Enterprise)SBA 8(a) / VetCert Portal Submitted

The Problem

Defense contractors and subcontractors handling Controlled Unclassified Information (CUI) or Federal Contract Information (FCI) must implement NIST 800-171 controls and, increasingly, achieve CMMC certification. Non-compliance can result in lost contracts, flow-down requirements from primes, and disqualification from future DoD opportunities. The regulatory landscape is complex and constantly evolving.

Who This Is For

Defense contractors handling CUI/FCI

Subcontractors facing flow-down requirements

Suppliers in the Defense Industrial Base

What's Included

Gap Assessment

Comprehensive review of your current security posture against NIST 800-171 controls.

SSP & POA&M Development

System Security Plan and Plan of Action and Milestones documentation tailored to your environment.

Policy Templates

Customizable policy and procedure templates aligned to CMMC and NIST requirements.

SPRS Score Support

Guidance on calculating and submitting your Supplier Performance Risk System score.

Monthly Compliance Retainer

Ongoing advisory, monitoring guidance, and documentation maintenance support.

Deliverables

  • Gap assessment report with prioritized findings
  • System Security Plan (SSP) tailored to your environment
  • Plan of Action & Milestones (POA&M)
  • Policy and procedure template set
  • SPRS score calculation worksheet and submission guidance

Our Process

1

Initial Consultation

We discuss your contracts, CUI/FCI handling, and compliance obligations.

2

Gap Assessment

We review your current controls against NIST 800-171 requirements and identify gaps.

3

Remediation Planning

We develop a prioritized POA&M with realistic timelines and resource estimates.

4

Documentation Development

We draft your SSP, policies, and procedures tailored to your environment.

5

Ongoing Support

Monthly retainer provides advisory access, monitoring guidance, and documentation maintenance.

Pricing

Gap Assessment

Custom Quote

One-time engagement. Includes assessment report and prioritized findings.

Monthly Compliance Retainer

Request a quote

Ongoing advisory, documentation maintenance, and monitoring guidance.

Quick Self-Assessment

Are You Ready?

Take this 5-question self-assessment to get a quick readiness snapshot.

1. Do you handle Controlled Unclassified Information (CUI) or Federal Contract Information (FCI)?

2. Do you have a current, documented System Security Plan (SSP)?

3. Have you completed a NIST 800-171 gap assessment in the last 12 months?

4. Do you have an active SPRS score submitted to the DoD?

5. Are you required to achieve CMMC certification for current or pending contracts?

Frequently Asked Questions

Book a Consultation