U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Manufacturing Extension Partnership (MEP)

The Road to CMMC Level 2.0 Compliance

With the help of: Ohio Manufacturing Extension Partnership (Ohio MEP)

About

Able Tool Corporation of Cincinnati, Ohio, is a woman-owned business providing high precision machining services to a diverse customer base. Focused on high mix/lower volume needs, Able Tool Corporation has excelled in terms of quality, agility (turn time) and customer engagement. Able Tool Corporation has over 30 years of quality machining, fabricating, welding, and assembly for a multitude of customers in all areas of industry. They are known for successes with prototypes as well as for manufacturing parts from existing samples to meet their customer's spare/replacement parts needs.

The Challenge

Able Tool Corporation has many customers that work with the DOD and, as a result, the company is required to be CMMC 2.0 Level 2 compliant. The client's previous effort on CMMC compliance was from 2017 and, although well documented, was not complete.  In 2023, the client requested TechSolve, part of the Ohio MEP and the MEP National Network™, assist in building on this previous project and identify the remaining gaps and ongoing remediation efforts required to become CMMC 2.0 Level 2 compliant. All efforts are focused on preparing the client for a certified CMMC assessment provided by a certified 3rd party assessor organization (C3PAO).
Mac was/is great to work with. I really appreciate all he has done for the project and would highly recommend to others that they utilize him. Never once did he make me feel stupid for asking questions that he may have already answered in a previous conversation or when I made a wrong statement. For me, he has made the process a lot easier and less stressful.
— Nina Bullock, Office Manager

MEP's Role

In 2023, TechSolve initially completed a cybersecurity gap assessment using CMMC 2.0 Level 2 practices. The purpose of the assessment was to identify compliance gaps, understand the current state of the client's overall security posture, and put a plan in place to reach the required future state. As part of this initial engagement, a review of the Client's existing policies, procedures, and plans was completed and a plan of action and milestones (PoAM) was developed along with the client's initial supplier performance risk system (SPRS) score. 

During the remediation engagement, which began in early 2024, TechSolve assisted the client in their remediation by working through open PoAM items identified during the gap assessment. TechSolve worked with the client and their technology partners to further refine policies, procedures, plans, and to explore technical measures to meet compliance objectives.  TechSolve will continue to work with the client through the remainder of 2024, preparing them for certification sometime in the early part of 2025.

Created October 10, 2024