Key to any readiness action plan for Level-2 compliance, our CMMC Copilot team first maps the high-level flow of all CUI
data types throughout your business operations, sites, and IT stack.

This foundational analysis highlights the best path for building your CMMC control objectives and serves as a roadmap for follow-on IT recommendations and policy documentation.

Though the IT controls for elements managed by TBS are CMMC-ready — including the operation of Altus Enclave — often policies associated with the boundary between your enterprise and third-party providers, including physical security, document handling, and staff acceptance, must be refined or established.

For each applicable domain, your CMMC Copilot PM furnishes a focused readiness survey. This structured instrument guides your organization’s self-review of current control objectives and provides a centralized framework for sharing details on your technologies and cybersecurity practices with our team.

With initial survey results in hand, we then conduct your CMMC PRE-Assessment, which also includes a preliminary SPRS score. Responses for all objectives related to Altus Enterprise, Ensemble, or Enclave delivery are furnished by TBS.

CMMC Copilot surveys all domains:

• Access Control (AC) *

• Awareness & Training (AT)

• Audit & Accountability (AU)

• Configuration Management (CM)

• Identification & Authentication (IA) *

• Incident Response (IR)

• Maintenance (MA)

• Media Protection (MP) *

• Personnel Security (PS)

• Physical Protection (PE) *

• Risk Assessment (RA)

• Security Assessment (CA)

• System & Communications (SC) *

• System & Info Integrity (SI) *

With your workshop results in hand, the CMMC Copilot team provides final IT action-items and guidance as needed for all domains (6 for level-1 or 14 for level-2), enabling you to close any readiness gaps in advance of formal CMMC Assessment or Self-Attestation.

We then conduct a RE-Assessment (and re-score) to make sure you’re ready to go.