Our Colorado machine shop has been steadily pursuing CMMC compliance for two and a half years now, and we’re entering the final phase of our journey. We aim to be CMMC compliant shortly, targeting audit readiness by the end of Q1.
To ensure we meet our goal, we’ve partnered with an IT company that specializes in CMMC compliance to guide us through our final steps. Find out what we’ve accomplished, what we have left, and why CMMC compliance and data security are so important to us here at Focused on Machining.
Accelerating Our Progress With a New Partner
Since our previous update, the complexity of CMMC certification requirements led us to seek out a new partner that could ensure we’d checked every single box. We made the strategic decision to collaborate with an IT firm, and their expertise has proven extremely valuable. As we near the finish line, we’re having biweekly meetings to check on every detail.
Here is how we’ve strengthened our cybersecurity infrastructure in recent months:
Software Upgrades
We have completed nearly all necessary software upgrades, including cutting-edge antivirus software, new multi-factor authentication software, and logging and monitoring software. We have also been approved for a Government Community Cloud High (GCC High) account with Microsoft. Our quoting software and ERP both offer aerospace and defense versions that are CMMC-compliant, and we are in the process of upgrading.
Hardware Replacement
Our hardware infrastructure is going through its final set of improvements. Most recently, we’ve installed two network smart switches that offer port-level control. These switches allow us visibility into all network connections, ensuring the greatest possible data security for our customers’ information.
We are also replacing data wires within our offices to segregate phone systems from computer networks, reducing the necessary scope of our compliance and protecting against potential security breaches.
Server Migration
We now have an updated server, and we are in the process of moving our data over. With the new server in place, we will be able to revamp our user accounts and refine our Organizational Document Policy (ODP) control.
What’s Next in CMMC Compliance
Several other protocols, including new backup procedures, will be put into place shortly. As it stands today, we are on track to achieve our audit-ready goal by the end of March as intended.
While CMMC compliance will be mandatory in defense projects over the coming years, we believe our efforts are a testament to our dedication to data security for all of our customers, just as our standing as an AS9100 machine shop signals qualities that will help every customer, not just those in aerospace.
When we are entrusted with sensitive data like 3D models and drawings, we do everything we can to ensure it remains safe, and many of these enhanced security measures will benefit our partners across every industry.
Our proactive approach to meeting these rigorous CMMC compliance requirements stems from our commitment to always earning and keeping our customers’ trust.
Ready for Your Next Defense Project
Are you looking for a CMMC-compliant manufacturer? Let’s discuss your next project. We’ll be ready to handle all your precision machining needs while meeting every data security requirement. Our CNC machine shop can handle any project, from aluminum parts to Inconel machining and beyond.
Request a quote today or contact us to learn more about our CMMC compliance status!