Dahlgren, Virginia
When your CUI is code, a model, or test data.
Capital Cyber takes small and mid-sized defense contractors in Dahlgren and King George County through CMMC Level 2, on-site. Engineering and software work puts Controlled Unclassified Information in places a parts shop never has, and the same 110 controls follow it there.
The Naval Surface Warfare Center Dahlgren Division began as the major testing area for naval guns and ammunition. Its mission today, in its own words: Develop and deliver weapon systems to deter and defeat our adversaries.
The disciplines it names include software, modeling and simulation, and systems engineering.
What counts as in scope when the work is software?
Every system that stores, processes or transmits CUI is in scope, and in engineering work that list is longer than it looks. A source code repository, a simulation model, a test plan, the data from a test event, the build server that compiles the code, and the developer laptop that pushes to it can each sit inside the boundary. Finding them all is the first real work of a gap assessment.
Whether Level 2 applies at all is decided by your contract, not by us and not by your zip code. If a clause flows Controlled Unclassified Information down to you, the 110 controls of NIST SP 800-171 follow it. If it does not, we will say so.
Is Dahlgren too far for an on-site assessment?
We are in Leesburg, so Dahlgren is a long drive and we are not pretending otherwise. What we will not do is price the distance as expertise. The assessment is the same $5,000 for most small and mid-sized contractors that it is anywhere else.
We assess CMMC Level 2 against NIST SP 800-171, on unclassified systems that handle Controlled Unclassified Information. We are not an Authorized C3PAO, we do not certify anyone, and nothing on this page should be read as a claim about classified environments or about any relationship with the division named here.
Case Study: Iron Lift
IRON LIFTIron Lift, our named CMMC Level 2 case study, is a construction company in Massachusetts. Read it on Case Studies, or see the managed program on CMMC In A Container™. Also nearby: Loudoun County, Fairfax County, Chantilly, Arlington, Alexandria, Prince William County and Stafford County, or the full list on Locations.
Already know you want to talk?
BOOK A CALLSkip the form. Pick a time and talk to us directly.
What happens in 30 minutes
- We learn about your business and the defense contracts you hold or are bidding on.
- We walk you through a gap assessment, the first step toward CMMC, and what it covers.
- If you qualify, we help you apply to Cyber Grants Alliance for an in-kind grant, which provides the gap assessment itself. No slides.
Ready to see where you actually stand?
A CMMC Level 2 gap assessment scores all 110 controls against your real environment, on-site in Dahlgren when it matters. You keep the findings, your SPRS score and a broad POA&M, written for your environment, whether or not you carry on with us.
Defense supplier under 25 people? Start with the grant.
Cyber Grants Alliance, a nonprofit, awards in-kind cybersecurity grants. It provides the work itself, including CMMC Level 1 and Level 2 gap assessments. There is no cost to you, and you are under no obligation to buy anything afterward, from us or from anyone.