Defense and CMMC

Defense cybersecurity for contractors

Mojave helps defense subcontractors prepare for NIST SP 800-171, DFARS cybersecurity requirements, and CMMC. If a contract creates that requirement, start here.

If you need a security assessment for an accounting firm, an advisory firm, or an MSP's client, start with the Security Baseline & Resilience Assessment. The services below are for defense contractors and the teams that support them.

The case studies are defense programs: a manufacturer, a semiconductor supplier, and an SBIR startup.

Services

• NIST SP 800-171 complianceGap assessment, documentation, and readiness work for defense environments.
• Level 1 readinessFixed-scope preparation where Federal Contract Information is the driver.
• Level 2 readinessBroader NIST SP 800-171 preparation where CUI is in scope.
• Gap assessment and remediationPrioritized closure work against the applicable requirements.
• Assessment readinessEvidence review before a government or third-party assessment.

Industries and references

• ManufacturingDefense manufacturing environments.
• AerospaceAerospace suppliers handling controlled technical data.
• Drones and UAVUAV teams with defense and commercial work.
• SemiconductorSuppliers supporting defense and trusted-microelectronics programs.
• Defense startupsEarly teams facing procurement and contract cybersecurity reviews.
• Manufacturing case studyHow a defense manufacturer accelerated readiness.
• Semiconductor case studyA supplier readiness program.
• SBIR Phase II case studyA defense startup documentation program.

Tools, guides, and sessions

Free tools and reading for this work: Level Finder, guides, glossary, town halls, Level 1 and Level 2, and GCC High and commercial Microsoft 365.

Scope, price, and timing are confirmed in a proposal before work starts.