Help implementing and documenting the NIST SP 800-171 security requirements that form the basis of CMMC Level 2.
Hands-on work to close identified gaps, such as configuring systems, tightening access controls, and tracking a plan of action and milestones.
Writing and maintaining the System Security Plan, policies, and procedures that assessors review as evidence.
Mock assessments, evidence review, and staff interview practice ahead of a C3PAO certification assessment.
These descriptions explain each service in general, not this firm's specific offering.