Free Report — No Form Required
The CMMC Readiness Gap
What the assessors saw before Phase II was paused.
Shortly before the Phase II suspension was announced, we began writing a report about the real state of CMMC readiness. We wanted to know whether the Defense Industrial Base was ready for Phase II, and if not, what was holding them back.
So we sat down with five independent C3PAOs and asked what they were really seeing in their Level 2 assessments. This free and ungated report is built from those conversations.
Most people won't be shocked to hear the DIB wasn't ready for assessment. What this report explores are the deeper reasons behind the lack of preparedness and the broader DIB trends in CMMC.
No email required. No gated form. Just the report.
Built From Conversations With
Cybersec Investments
Hive Systems
Kieri Solutions
Sentinel Blue
Smithers
What You'll Find Inside
Six assessor-level takeaways on where the Defense Industrial Base actually stands on CMMC readiness, straight from the people conducting the assessments.
1
Why assessors have been turning away a significant percentage of prospective clients for reasons that have nothing to do with scheduling.
2
The two key reasons that organizations have delayed getting ready.
3
Which organizations tend to show up prepared, and which ones consistently don't.
4
Why documentation trips up organizations in assessments more than the technical controls do.
5
The specific controls and control families that give OSCs the most trouble.
6
Where organizations should be focusing their energy while Phase II remains up in the air.
Stay Informed
Get New Research First
Join the mailing list to be notified as soon as new reports, white papers, and analyst briefings are published.
No spam, just new research and reports as they become available.
New reports and white papers as they publish
Executive briefings and analyst materials
Unsubscribe anytime
Join the Mailing List
Get Started
Ready to Talk to a Sentinel Blue Expert?
This report is a starting point. If you are ready to discuss your organization's specific CMMC readiness, security monitoring, or managed IT needs, our team is ready to help.