Resources

Learn Before You Build.

CMMC compliance has a lot of noise around it. These resources are built to cut through it with honest information about what the standard actually requires, what the assessment process actually looks like, and how to evaluate whether a compliance program is real.

Start Here

CMMC Self-Assessment Tool

Not sure where your organization stands? DCG's CMMC self-assessment tool walks you through the 110 NIST SP 800-171 controls and gives you a plain-language picture of where your program has gaps, without requiring you to schedule a call first.

The tool is free. It takes approximately 30 to 45 minutes. The output is a scored summary you can use to have a more informed conversation with any compliance consultant, including DCG.

One note: the self-assessment tool evaluates against the 110 controls, not the 320 assessment objectives. A real gap assessment against the 320 is a separate engagement. But this is the right place to start.

Get Access to the Tool

What the Tool Covers

  • All 14 NIST SP 800-171 control families
  • Plain-language descriptions of each control requirement
  • Scored output by domain, showing where you are strong and where you have gaps
  • Guidance on which gaps are likely to be flagged in a C3PAO assessment
  • Summary report you can share with your compliance team or consultant

Important: A self-assessment is not a gap assessment. If you need a scored report against all 320 assessment objectives to present to a C3PAO or prime contractor, that is a DCG Readiness Review, not this tool.

From the DCG Blog

Straight Answers on CMMC

DCG publishes plain-language guidance on CMMC compliance for DIB contractors. No product pitches. No thirty-day certification claims. Just honest information about what the standard requires and how to meet it.

Video and Podcast

Watch and Listen

DCG publishes video and podcast content on CMMC compliance, the assessment process, and what the Defense Industrial Base needs to know as the regulatory landscape evolves.

Case Studies

Compliance That Held Up

What a real CMMC engagement looks like from the client’s side — what it produced, and what it did for the business afterwards.

Events

Where to Find Us

DCG speaks at and exhibits across the Defense Industrial Base and the research security community. If you are attending, come and find us.

Ready to Talk?

The First Conversation Is Free.
And It Will Tell You the Truth.

If the resources here have raised questions you want answered for your specific situation, the next step is a conversation with DCG. We will tell you honestly what we see before we tell you anything about our services.

Book a Free Consultation