Precision machine shops
CNC milling and turning shops working to a prime's controlled drawings and models.
Industries
CMMC for the work you actually do.
A machine shop, an engineering firm and a construction contractor all answer to NIST SP 800-171, and each one keeps Controlled Unclassified Information in different places. Pick yours. Capital Cyber, based in Leesburg, Virginia, leads CMMC Level 2 work for all eight and works on-site across Northern Virginia.
The 110 requirements are the same for everyone. Where CUI hides, and what makes scoping hard, is not.
Which industry are you in?
EIGHT INDUSTRIESSheet metal and fabrication shops
Laser, punch, brake, weld and assembly shops building parts from a prime's controlled drawings.
Aerospace parts suppliers
Prime drawings, process specs, FAI and CMM data, outside processors and the ITAR overlap.
Defense electronics manufacturers
Gerbers, schematics, BOMs, test data and firmware, from the data package to the test station.
Engineering and design firms
Mechanical, electrical, systems and naval engineering firms holding DoD drawings and models.
Defense research and development firms
Small R&D, test and evaluation, and SBIR or STTR firms doing DoD-funded research.
Government IT and services contractors
IT, engineering and staffing firms whose CUI lives in their own email, Teams and laptops.
Defense construction contractors
Contractors and trades whose marked drawings travel to jobsites, tablets and plan rooms.
Not on the list?
These are the industries we see most often in the defense supply chain around Northern Virginia. If your contract brings CUI or FCI and your business is something else, the work starts the same way: with the CMMC Level 2 gap assessment, or a look at all services.
Book a 30-minute call.
BOOK A CALLScoped per client, so the first step is a conversation. Pick a time.
What happens in 30 minutes
- We learn about your business and the defense contracts you hold or are bidding on.
- We walk you through a gap assessment, the first step toward CMMC, and what it covers.
- If you qualify, we help you apply to Cyber Grants Alliance for an in-kind grant, which provides the gap assessment itself. No slides.
Not sure where CUI lives in your business?
That is the first thing a gap assessment answers. Tell us what you make or deliver and we will tell you where to start.
Defense supplier under 75 people? Start with the grant.
Cyber Grants Alliance, a nonprofit, awards in-kind cybersecurity grants. It provides the work itself, including CMMC Level 1 and Level 2 gap assessments. There is no cost to you, and you are under no obligation to buy anything afterward, from us or from anyone.