• SERVICE PROVIDER APPLICATION

  • The Connecticut Office of Manufacturing is looking for trusted, high-quality regional service providers to perform 1) Cyber Gap Analysis, 2) Remediation, and 3) CMMC Level 2 certification. We will review applications on a quarterly basis until we have a small, but highly skilled, group of service providers capable of supporting Connecticut's defense manufacturers.

    * = required field

  • COMPANY INFORMATION

  • EXPERIENCE

  • 1. Do you have experience providing CMMC related service(s) to the Defense Industrial Base (DIB) manufacturers?*

  •     Evidence:

  • 2. Do you have experience working with small (< 20 employees) and/or medium-size (< 100 employees) manufacturers (SMM)?*

  •     Evidence:

  • 3. Are you in the CyberAB Marketplace?*

  •     Evidence:

  • 4. Do you have NIST 800-171 assessment experience?*

  •     Evidence:

  • 5. Do you have experience helping manufacturers with CMMC remediation?*

  •     Evidence:

  • 7. Are you a C3PAO with experience performing CMMC Level 2 certification?*

  •     Evidence:

  • EXPERTISE

  • 1. Does your organization employ a team that is uniquely qualified to support CMMC Level 2 assessment preparation?*

  •     Evidence:

  • 2. Does your organization employ a team that is uniquely qualified to provide CPAO assessment services?*
  • 3. Do you employ talent that possesses comprehensive technical and professional competencies?*

  •     Evidence:

  • Identify related employee certifications. Select all that apply.
  • 4. Has your organization achieved CMMC Level 2 certification?*

  •     Evidence:

  • Browse Files
    Drag and drop files here
    Choose a file
    Cancelof
  • 5. Do you provide ongoing, internal professional development for your staff related to CMMC readiness and/or assessment optimization, regulations, etc.?*

  •     Evidence:

  • CAPABILITIES

  • 1. Have you developed or do you utilize a detailed, pre-assessment tool aligned against all 110 controls?*

  •     Evidence:

  • If yes, can it be found online?
  • 2. Do you provide pre-assessment, remediation support, and/or formal C3POA assessment? Please select all that apply:*
  • 3. Do you understand Controlled Unclassified Information (CUI)?*

  •     Evidence:

  • 4. Do you have an enclave solution that is CMMC ready?*

  •     Evidence:

  • 5. Do you have any experience implementing security controls?*

  •     Evidence:

  • If yes, please identify those areas for which you have experience. Select all those that apply.

  • INCORPORATION AND GOOD STANDING

  • 1. Provide the following:

  • Browse Files
    Drag and drop files here
    Choose a file
    Cancelof
  • Browse Files
    Drag and drop files here
    Choose a file
    Cancelof

  • PRICING TRANSPARENCY STATEMENT

  • As a condition of inclusion in our directory, service providers must demonstrate a commitment to pricing transparency and fair market practices. Providers should clearly disclose service costs, fee structures, and any applicable terms to prospective Connecticut manufacturers. Pricing should be competitive, reasonable, and reflective of the value delivered, helping Connecticut manufacturers make informed decisions and ensuring confidence in the resources featured on your website. We reserve the right to review and evaluate pricing practices when determining eligibility for participation.

  • EVALUATION PROCESS

  • Service providers are evaluated using standardized, weighted scoring rubric designed to assess their qualifications, experience, capabilities, and ability to support manufacturers pursuing CMMC Level 2 compliance. This structured approach promotes consistency, fairness, transparency, and impartiality in the evaluation and selection process. Providers are assessed against established criteria, and inclusion in the directory is based on the results of this evaluation.

  • INCLUSION IN DIRECTORY

  • Inclusion in the CMMC Service Provider Directory is contingent upon meeting vetting criteria and maintaining the standards and qualifications required for participation. We reserve the right to remove any provider from the directory at any time, at our discretion, for reasons including, but not limited to, failure to maintain required qualifications or credentials, material misrepresentation of services or capabilities, substantiated complaints or concerns regarding service quality or business practices, failure to comply with applicable laws or program requirements, or other conduct that may compromise the integrity, credibility, or objectives of the directory.
  •  
  • Should be Empty: