News & Insights

At Salas O’Brien, we are committed to staying ahead of evolving cybersecurity standards to support our clients’ most critical projects. As part of this commitment, we’ve made significant strides in aligning with the Department of Defense’s Cybersecurity Maturity Model Certification (CMMC) standards. These standards will be mandatory for government contractors working with Controlled Unclassified Information (CUI) starting in 2025.

Proactively prepared for certification

To ensure uninterrupted support for our federal government clients, we have:

• Established a secure enclave: A dedicated, secure technical environment to manage CUI data is fully operational.
• Enhanced physical security: Office security assessments are being completed as needed in 2025 and will continue as part of our ongoing efforts.
• Prepared our team: Mandatory training will launch in 2025 for team members working with federal government contracts.

Salas O’Brien is equipped to work on projects with CUI requirements. We have self-attested to NIST 800-171 requirements with a registered score in SPRS. We are CMMC level 2-ready and well-positioned to pursue CMMC certification in 2025 upon ratification.

Setting the standard

These efforts are not just about compliance; they’re about ensuring the trust, reliability, and protection that our clients expect. By proactively aligning with CMMC requirements ahead of federal timelines, we are leading the industry in readiness. This leadership ensures that we can continue supporting government projects involving CUI data without any interruptions or risks to security.

Our proactive approach underscores our commitment to safeguarding sensitive information and protecting the mission-critical work of our government clients. By investing in advanced security measures today, we are not only meeting current requirements but also paving the way for seamless, secure collaboration in the future.

Learn more about Salas O’Brien’s work with governmental agencies here.