Securing CMMC Compliance: IT Due Diligence for a Leading Die-Cutting Provider
TRANSACTION ADVISORY CLIENT SUCCESS
CHALLENGE
IT Ally was engaged to perform full IT and Cybersecurity due diligence to include business applications, internal infrastructure, cybersecurity and data on behalf of our PE backed client who was pursuing an add-on, an industry leading die-cutting provider servicing many industries including aerospace. Therefore, this also included gaining an understanding of their compliance with regulatory requirements such as CMMC. During diligence, client reported a level of NIST compliance, however there was little evidence to support this claim.
SOLUTION
As part of day 1 initiatives, a CMMC audit was recommended to assess the actual and provable level of CMMC compliance. Using a checklist, gaps were identified across many areas including access control, asset management, auditing/accountability, awareness training, configuration, and incident response. A managed Governance, Risk and Compliance program was also recommended, where remediations could be prioritized for completion within an automated compliance platform.
