Assessment Consultant

The objective of our program is to ensure participants are familiarized with CMMC Levels 1 & 2 Overview, DFARS 252.204-7012 & NIST SP 800-171, Controlled Unclassified Information (CUI), FedRAMP Moderate Equivalency, ITAR / EAR Export Controls, assessment Methodology & Frameworks, scope Validation (People, Process, Technology), control-Level Gap Analysis, artifact Review & Validation, remediation Planning & POA&Ms, engagement planning, Stakeholder Coordination, Assessment Scheduling, Risk & Issue Management, Pre-Assessment Readiness Support, QA/QC of Evidence, C3PAO Interaction Support and System Security Plan (SSP) Defense, Findings Analysis, Client Debriefs, Remediation Advisory, and Continuous Improvement Contributions.

The Dedicated Assessment Consultant plays a lead role representing clients in C3’s Cybersecurity Maturity Model Certification (CMMC) Assessment program. This role works collaboratively with client stakeholders including business leaders and internal IT, as well as C3’s professional services and managed services teams and third-party service providers. The primary purpose of this role is to project manage client assessments and to represent and defend C3’s reference architecture and compliance implementation on behalf of the client during Certified Third-Party Assessment Organization (C3PAO) Pre-Assessments and Assessments.