Stronger policies, procedures, & cybersecurity posture in preparation for a CMMC Level 3 audit
Zepher Inc. + Edge Networks
Logical framework, professional feedback.
“Edge Networks provided a logical framework, professional feedback and managed the process to a successful conclusion. Their assistance moved us months forward on our certification and gave us confidence in our CMMC3 supplier survey.”
– Jill Nickerson
Project Overview
Reviewed past documentation and created new policy and procedure
Performed a GAP analysis so Edge could assist and review the other requirements
Zepher is now ready for an accredited C3PAO to perform their review
The Challenge
Zepher is a contract manufacturer for the Aerospace/Defense industry working toward CMMC3 cybersecurity certification.
Zepher contracted with us through an Impact Washington grant to get assistance with the final policies required for certification and review their information to identify any open gaps.
The Process
The process included reviewing documentation, creating new policies and procedures, reviewing controls that were not still at a level three, and planning additional technical controls.
We performed a GAP analysis based on the documents that Zepher provided allowed us to quickly assist and review the other requirements.
The Results
Throughout the process, we worked with Zepher to ensure that the new policies and procedures got management approval. We also guided management to understand the importance of leveling up Zepher’s cybersecurity posture.
Bring on the C3PAO!