QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Building Sterling Aerosystems' CMMC Level 2 program: CUI scoping that finds Controlled Unclassified Information outside the CAD environment, in program-management email, a shared-drive spreadsheet and help-desk tickets, then pulls it into an enclave while finance is redesigned out of scope; the eight-step defense compliance staircase from level determination through CUI scope, gap assessment and SPRS, controls, SSP and POA&M, enclave, C3PAO certification and sustainment; and the score sheet where a policy-only self-assessment of 105 out of 110 is replaced by an evidence-based score, MFA and FIPS-validated encryption are fixed first, POA&M items close inside 180 days and the C3PAO certifies Level 2.
CY-SENIOR-073Senior Level · CMMC & Defense Compliance

CMMC & NIST SP 800-171 Compliance Program — The Defense Compliance Staircase

A strategic senior-level course that builds a defense industrial base compliance program from a live DoD contract through a passed C3PAO assessment and beyond. Climb the defense compliance staircase - eight steps: Contract & Level Determination, CUI Scoping, Gap Assessment & SPRS, Control Implementation, SSP & POA&M, Enclave & Supply Chain, C3PAO Certification, and Sustainment - determining the contract's real level, scoping CUI honestly, scoring every gap against real evidence, implementing all 110 requirements with proof, shrinking scope with an enclave, flowing obligations to suppliers, passing an independent assessment, and sustaining certification. Four hands-on activities in every lesson, built from real program artifacts, not shell commands.

16 hours8 chapters32 lessons225 activities8 labs

What you'll learn

  • Determine a contract's true CMMC level, assessment path, and flow-down obligations from its own clauses.
  • Scope CUI honestly across data flows and the five CMMC asset categories, and reduce scope defensibly.
  • Implement and evidence all 110 requirements, maintain a disciplined SSP/POA&M, and design a scope-reducing enclave.
  • Select and pass a C3PAO assessment, then sustain certification through affirmations, monitoring, and recertification.
Price:৳10,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.