CMMC/NIST Starter Gap Review

Best For

• ▸Businesses exploring CMMC or NIST compliance
• ▸Organizations in the defense or federal supply chain
• ▸Companies that want an initial gap assessment before investing
• ▸Businesses that want to know what compliance would require

What Is Included

• ✓Current control review against common framework expectations
• ✓Control gap identification
• ✓Readiness level assessment
• ✓Gap prioritization
• ✓Compliance effort estimation
• ✓Starter gap review documentation

What You Get

• →An honest picture of your CMMC/NIST readiness
• →Gaps identified against common expectations
• →A clear sense of what compliance would involve
• →A documented starting point

What Is Not Included

• —Hardware, licenses, subscriptions, permits, or third-party service fees unless explicitly included
• —Major remediation beyond the purchased scope
• —Emergency after-hours response unless the emergency product is purchased
• —Legal, tax, insurance, or regulatory advice
• —Credential collection through public forms

Customer Prerequisites

• ⓘAuthorized decision maker approval
• ⓘA contact person who can answer business and technical questions
• ⓘSafe access coordination when admin work is required
• ⓘPermission to document findings and recommendations

Questions We Will Ask

To get started, we will ask about:

• Business name*

  Legal or public-facing business name.

• Primary contact name*

  Main person Maine Cyber Tech should coordinate with.

• Primary contact email*

  Used for scheduling, service updates, and deliverables.

• Best phone number

  Useful for urgent, onsite, or access-sensitive work.

+9 more questions