2021 CMMC Preparation Study | Download Now

Executive Summary of Findings

CMMC is an important initiative

81% of the study participants indicated that CMMC is an important initiative needed to protect sensitive information within the DIB. None of the participants indicated that CMMC is not an important initiative.

CMMC will create unnecessary burdens and costs

In spite of agreement on the importance of CMMC, nearly one-third of the participants indicated that CMMC will create unnecessary burdens and costs, and compliance with NIST 800-171 is sufficient without CMMC. This perspective varied widely between larger and smaller contractors.

CMMC will create a competitive advantage

Two-thirds of the participants indicated that moving quickly to demonstrate compliance with CMMC will create a competitive advantage for their organization.

CMMC will create business growth opportunities

Nearly 50% of the participants indicated that they expect to see business growth opportunities linked to achieving CMMC readiness and certification

Most contractors are taking a hybrid approach to preparation

Most contractors are taking a hybrid approach to preparation, utilizing both internal personnel and consulting assistance. Very few are completely dependent on a consultant

Most contractors are including their entire organization in the scope of CMMC preparation and certification.

The percentage of smaller contractors taking an all-company approach is higher than average, and most larger contractors are taking a divisional, or enclave approach

Cost expectations vary widely

Cost expectations vary widely and, not surprisingly, are lower for smaller organizations. Unexpectedly, the projected cost of CMMC preparation and certification is not inversely correlated to the current degree of compliance with NIST 800-171.

CMMC Preparation Study

Download the White Paper