Microsoft 365 E5 NIST 800-171 -1 Week GAP Assessmt

KAMIND IT is a CMMC (Cybersecurity Maturity Model Certification) RPO (Registered Provider Organization). CMMC is a certification requirement for all DOD (Department of Defense) contractors and subcontractors and will soon be a requirement for any organization that does business with the federal government (DoD or Commercial). One of the steps to get ready for CMMC is to complete a NIST 800-171 BASIC GAP assessment.

The GAP Assessment score is required for Supplier Performance Risk Performance Systems (SPRS) under the Procurement Integrated Enterprise Environment (PIEE) for any contract award. This Gap Assessment does not include remediations or plan of action milestone (POAM) with completion dates (when the organization will achieve a 110 score for all controls). This offer is for a NIST800-171 Gap Assessment for a single Host Unit, scoped to a single contract, single subnet using the Microsoft 365 E5 license. Each scoped area requires a different GAP assessment.

KAMIND will conduct GAP assessments using the NIST SP 800-171 DoD Assessment Methodology, and provide the following:

• A one to two day interview with the key individual responsible for the organization that has knowledge of the scoped area of inquiry that can attest to the implementation of NIST SP 800-171
• Executive summary of the Gap Assessment
• A NIST SP 800-171 score (measured against the DoD assessment Methodology version 1.2.1)

The GAP assessment is the first step in the process for CMMC implementation and later accreditation. After a GAP assessment is completed, the OSC (Organization Seeking Accreditation) for CMMC, will need to create a CMMC an implementation plan (using the Microsoft CMMC Level 1 or Level 3 placement as a guide) to address the missing elements identified in the NIST 800-171 GAP assessment.

Contact KAMIND IT today to begin