CMMC Basics (Kieri Solutions)

Mark Hapeman and Amira Armand outline key steps for CMMC prep: start with official DoD resources, classify data (FCI or CUI), and scope your environment using the Level 2 Scoping Guide. Implement NIST SP 800-171, document controls, and conduct a self-assessment. Submit results to SPRS or EMASS, depending on the assessment type. Certification, especially at Level 2, enhances credibility and competitiveness in DoD contracting.

In this installment of the CMMC Basics series, Mark Hapeman and Amira Armand from Keiri Solutions break down how CMMC requirements are introduced and enforced through federal contract clauses, with a focus on 32 CFR and 48 CFR—two key regulatory components shaping the CMMC landscape.

In the final episode of the CMMC Basics series, Mark Hatman and Amir Armand from CARRI Solutions focus on one of the most pressing topics for defense contractors: how to manage and reduce the cost of achieving CMMC Level 2 compliance—without sacrificing functionality, security, or long-term sustainability.