Home > Solutions > CMMC Services

Your Trusted Partner in Navigating CMMC Compliance

At August Schell, we recognize the critical importance of CMMC compliance for safeguarding sensitive information and maintaining the trust of your clients and partners. In a world of evolving cyber threats, achieving and maintaining CMMC certification is essential to your organization’s security and success.

Schedule a Consultation:

Anticipated Timeline

On December 16, 2024, the Department of Defense (DoD) officially established the Cybersecurity Maturity Model Certification (CMMC) 2.0 program. The next major milestone for this initiative, which impacts the Defense Industrial Base, is the finalization of CFR Rule 48. This rule will mandate CMMC compliance as a prerequisite for DoD contract awards. Due to its concise page count, CFR Rule 48 is anticipated to be finalized in Q2 or Q3 of 2025, and no later than Q4, marking the start of Phase 1 implementation of the CMMC program.

CMMC 2.0 Program Establishment (CFR Rule 48 Finalization) 

00
Days
00
Hours
00
Minutes
00
Seconds

Phase 1: October 1st, 2025

Market Roll Out (Dec 16, 2024) – You will likely begin seeing RFIs from Prime Contractors for your status and plans for CMMC Compliance.

Phase 1 Implementation (Rule 48 Finalization): October 2025
Key Actions:
The initial integration of CMMC requirements into new DoD contracts.
CMMC Level 1 or Level 2 self-assessments and affirmations of compliance will become prerequisites for contract awards.
At its discretion, the DoD may require CMMC Level 1 Self-Assessment or CMMC Level 2 Self-Assessment for applicable contracts as a condition for exercising option periods on contracts awarded before the rule’s effective date.
The DoD may also opt to replace CMMC Level 2 Self-Assessments with CMMC Level 2 Certification Assessments where applicable.
Phase 2 Implementation: October 2026
Key Actions:
The DoD may begin requiring CMMC Level 2 certification assessments for all new applicable contract awards.
Contractors will need to pass a certified third-party Level 2 CMMC assessment to qualify for contracts that include Level 2 certification requirements.
The DoD may choose to introduce CMMC Level 3 certification assessment requirements in certain contracts.
At its discretion, the DoD may delay the inclusion of CMMC Level 2 Certification Assessment to an option period instead of a condition for contract award.
The DoD may also include CMMC Level 3 Certification Assessment where applicable.
Phase 3 Implementation: October 2027
Key Actions:
In addition to Phase 1 and 2 requirements, the DoD will extend the CMMC Level 2 certification assessment to applicable contracts awarded prior to the finalization of the CMMC rule.
The DoD will not exercise options on existing contracts unless the contractor has passed a third-party Level 2 CMMC assessment.
The DoD will require CMMC Level 3 certification assessments for all applicable new contracts.
CMMC Level 2 and Level 3 Certification Assessments will become mandatory for all applicable DoD contracts, both for contract awards and option periods.
Phase 4 Implementation: October 2028
Key Actions:
Full implementation of CMMC Program requirements across all applicable DoD solicitations and contracts, including option periods on contracts awarded before Phase 4.

WHY PARTNER WITH AUGUST SCHELL FOR CMMC COMPLIANCE?

At August Schell we are more than just a service provider; we are an engineering company first, dedicated to delivering tailored solutions that meet your specific needs. Our vendor-agnostic approach ensures that we are focused solely on finding the best and most effective solutions for your unique situation, rather than pushing any particular product or service. With our commitment to engineering excellence and unbiased guidance, you can trust us to help you navigate the complexities of CMMC compliance with a solution that truly fits your organization.
Expertise: Leverage the deep expertise of our cybersecurity professionals, who are well-versed in CMMC requirements and best practices.
Customized Solutions: We tailor our approach to fit your organization’s unique needs, ensuring a path to compliance that aligns with your specific goals and budget.
Commitment to Excellence: Our commitment goes beyond mere compliance; we aim to strengthen your overall cybersecurity posture and resilience.
Customer Satisfaction: We prioritize your success, providing unmatched support and guidance throughout your CMMC compliance journey.

READY TO ELEVATE YOUR CYBERSECURITY WITH CMMC COMPLIANCE?

Navigating CMMC compliance doesn’t have to be overwhelming. Partner with August Schell and let us guide you every step of the way. Contact us today to schedule your consultation and take the first step towards a secure and compliant future.
Contact the August Schell CMMC Team
Schedule a Consultation
August Schell is a Registered Practitioner Organization (RPO) for CMMC. Here are just some of the services we can help with.

Frequently Asked Questions

How to get started?
Contact our CMMC Team or Schedule a Consultation, we will work with you to determine what is required for your particular situation:
CMMC Readiness Assessment: Unsure where to start with CMMC compliance? Our expert team will conduct a comprehensive readiness assessment to evaluate your organization’s current cybersecurity posture and identify areas for improvement to meet CMMC requirements.
CMMC Gap Analysis: Once we have assessed your organization’s readiness, we will perform a thorough gap analysis to identify any gaps between your current practices and the requirements of the desired CMMC level. This analysis serves as a roadmap for implementing necessary changes to achieve compliance.
CMMC Implementation & Documentation Support: Our team will provide hands-on support and guidance throughout the implementation process, helping you establish and maintain the necessary policies, procedures, and controls to meet CMMC requirements. We will work closely with your team to ensure a smooth and successful implementation.
CMMC Assessment Preparation: As you prepare for your official CMMC assessment, we will assist you in organizing documentation, conducting internal audits, and addressing any last-minute concerns to ensure you are fully prepared for a successful assessment with either a C3PAO Representation or Self-Attestation Support.
CMMC Managed Services: Once you have achieved compliance, our managed services team can provide ongoing support to help you maintain compliance, stay ahead of evolving threats, and adapt to changes in CMMC requirements over time.