top of page
Search
Writer's pictureJean Wenzel

Bluestreak | Bright AM™ Approved as a Registered Practitioner Organization (RPO) by the CMMC Accreditation

Updated: Nov 21


NISY CMMC logos


Bluestreak™ Reading Time: 5 minutes


Bluestreak I Bright AM™ Approved as a Registered Practitioner Organization (RPO) by the CMMC Accreditation Body


Bluestreak logo

Cybersecurity strategy, assessment, and implementation leader dedicated to preparing the Defense Supply Chain for CMMC compliance.


Bluestreak Compliance logo

This significant achievement, Bluestreak is approved as a RPO, enables Bluestreak Compliance™ to offer expert consulting services to defense contractors and suppliers aiming to comply with CMMC cybersecurity standards and prepare for their Cybersecurity Maturity Model Certification (CMMC) audits.


 

In January 2020, the Department of Defense (DoD) introduced the Cybersecurity Maturity Model Certification (CMMC) program to ensure that contractors have implemented adequate security measures to protect sensitive data across its extensive 300,000-contractor supply chain, known as the Defense Industrial Base (DIB). The CMMC 2.0 framework includes three certification levels, from Foundational to Expert, covering 14 control families and 110 practices aligned with NIST SP 800-171 R2.

Although CMMC 2.0 has not been fully released, the DoD plans to implement the CMMC program under a four-phased plan starting as early as Q1 2025, with all new solicitations for contracts involving Controlled Unclassified Information (CUI) and Federal Contract Information (FCI) by October 1, 2026, to secure DoD contracts.


In the Cybersecurity Maturity Model Certification (CMMC) ecosystem, a Registered Provider Organization (RPO) is vital in guiding organizations toward achieving CMMC compliance. The CMMC framework is designed to bolster the cybersecurity of defense contractors and their supply chain partners, safeguarding sensitive government information. Authorized by the CMMC Accreditation Body (Cyber-AB), an RPO offers consulting and advisory services to help organizations prepare for CMMC assessments and attain certification, ensuring they meet the required cybersecurity standards.


As an Approved Registered Practitioner Organization by the CMMC Accreditation, our Services Provide:

  • Gap Analysis

  • Readiness Assessment

  • Remediation Planning

  • Implementation Support

  • Policy and Procedure Development

  • Training and Awareness

  • Mock Assessments

  • Continuous Monitoring and Improvement

  • Documentation Assistance

  • Advisory Services

  • Collaboration with C3PAOs

  • Compliance Journey


Here's a structured breakdown of the different components involved in supporting an organization's compliance with the Cybersecurity Maturity Model Certification (CMMC):

  • Gap Analysis

  • Identify discrepancies between the current cybersecurity posture and the desired CMMC level.

  • Conduct detailed assessments, review current cybersecurity measures, and compare them against CMMC requirements.

  • Readiness Assessment

  • Evaluate the organization's preparedness for a formal CMMC assessment.

  • Review existing policies, procedures, and practices to determine readiness.

  • Remediation Planning

  • Develop a strategic plan to address identified gaps and weaknesses.

  • Create action plans with specific steps and timelines to achieve CMMC compliance.

  • Implementation Support

  • Assist in the implementation of required cybersecurity practices and processes.

  • Provide technical and strategic guidance to implement necessary changes.

  • Policy and Procedure Development

  • Ensure organizational policies and procedures meet CMMC requirements.

  • Help create or update cybersecurity policies, procedures, and documentation.

  • Training and Awareness

  • Prepare employees for CMMC compliance through education.

  • Provide training on cybersecurity best practices and CMMC requirements.

  • Mock Assessments

  • Simulate the CMMC assessment process to improve readiness.

  • Conduct mock assessments to help organizations understand what to expect and identify areas for improvement.

  • Continuous Monitoring and Improvement

  • Maintain ongoing CMMC compliance and adapt to changes.

  • Offer continuous support, monitor for updates in CMMC requirements, and advise on necessary adjustments.

  • Documentation Assistance

  • Ensure necessary documentation is prepared and organized for CMMC compliance.

  • Help prepare and organize documentation and evidence to support compliance efforts during the assessment.

  • Advisory Services

  • Provide expert advice tailored to the organization's cybersecurity needs.

  • Offer recommendations on cybersecurity strategies, technologies, and best practices.

  • Collaboration with C3PAOs

  • Facilitate the formal CMMC assessment process.

  • Work closely with Certified Third-Party Assessment Organizations (C3PAOs), conducting the assessments and issuing certifications.

  • Compliance Journey

  • Guide organizations through the entire CMMC compliance process.

  • Serve as trusted advisors and guides, ensuring organizations are well-prepared for the formal assessment and effectively navigating CMMC compliance complexities.


To help your business navigate these previously uncharted waters, Bluestreak Compliance™ has CMMC Registered Practitioners and Registered Practitioner "Advanced" on staff, ensuring expertise and proficiency in CMMC compliance and cybersecurity practices. And, with discounted rates for SMB’s.

 

About the Author

Joe Coleman is the Cyber Security Officer for Bluestreak Compliance™, a division of Throughput | Bluestreak | Bright AM™. Joe is a Certified CMMC-RPA (Registered Practitioner Advanced).


Joe has over 35 years of diverse manufacturing and engineering experience. His background includes extensive training in cybersecurity, DFARS, NIST SP 800-171, and CMMC, a career as a machinist, machining manager, early additive manufacturing (AM) pioneer, and production control/quality management software implementer/instructor. 


cover at of ebook to download

Contact Joe Coleman at joe.coleman@go-throughput.com or at 513-900-7934 for any questions and a free consultation with a complimentary detailed compliance eBook


About Bluestreak™:

Bluestreak™ is a powerful Manufacturing Execution System (MES) and a fully integrated Quality Management System (QMS) designed for the manufacturing environment and service-based manufacturing companies ( metal-treating/powder-coating, plating, heat-treating, forging, and metal-finishing), businesses that receive customers’ parts, perform a process (service) on them, and send those parts back to the customer). Companies need MES software tailored to specific functionality and workflow needs, such as industry-specific specifications management, intuitive scheduling control for staff and machinery maintenance, and the ability to manage work orders and track real-time data. If different work centers on the production floor aren’t “speaking” to each other via the MES, the data loses value and becomes disjointed or lost in disparate silos.


Bluestreak | Bright AM™ is an MES + QMS software solution specifically designed to manage and optimize the unique requirements of Additive Manufacturing’s production of parts and powder inventory usage.

3 views0 comments

Comments


bottom of page