Got our CMMC postcard? You are in the right place.
CMMC compliance, reinvented for speed
Level 1 self-assessment package in minutes. Level 2 documentation in days. Powered by ComplianceArmor®.
Book your free 20-minute CMMC scoping call
With a CMMC-RP from Petronella Technology Group, Inc. No cost, no obligation.
Call (919) 348-4912Penny, our AI assistant, answers 24/7 and books your callor leave three details
Not ready to talk? Estimate your SPRS score with our free calculator or download the one-page scoping worksheet.
What you get on the call:
- Which CMMC level your contracts point to: Level 1 (15 FAR 52.204-21 requirements) or Level 2 (110 NIST SP 800-171 requirements).
- What is in scope, so you protect the systems that touch contract data and not the whole company.
- A look at ComplianceArmor® generating documentation, and a fixed-scope quote within two business days if you want one.
Cyber AB Registered Provider Organization #1449. Every practitioner holds the CMMC-RP credential. Raleigh, NC, since 2002.
Phase 2 is paused. Your contract obligations are not.
On July 13, 2026 the Department of War suspended CMMC Phase 2 (memorandum 26-P-1023) and put pending certification milestones on hold while a CMMC Reform Task Force reviews the program. That paused third-party certification. It did not remove the work your contracts already require.
Still in your contracts
It requires you to implement NIST SP 800-171 where you handle Controlled Unclassified Information, and to report cyber incidents.
Your SPRS score still counts
A current self-assessment score must be posted in SPRS. Primes still ask for it, and an inflated score carries False Claims Act exposure.
Self-assessments remain
Level 1 and Level 2 self-assessments from Phase 1 remain in force. The pause is the cheapest time to get a number you can defend.
What "minutes" and "days" on the card mean. ComplianceArmor® produces the documentation fast: the Level 1 self-assessment package in minutes and the Level 2 document set (System Security Plan, policies, POA&M) in days. Documentation is not certification. Controls still have to operate and produce evidence, and a Level 2 certification assessment is performed by a C3PAO on its own calendar.
Petronella Technology Group, Inc. is a Registered Provider Organization. We prepare you and we consult. We do not assess or certify, so the "assessment" Penny books is your readiness assessment scoping call.
Who you would be talking to
Cyber AB RPO #1449
A Registered Provider Organization authorized by the Cyber AB to deliver CMMC advisory and preparation services.
A named CMMC-RP team
Craig Petronella (founder; CMMC-RP, CCNA, CWNE, DFE #604180), Blake Rea, Justin Summers and Jonathan Wood, all CMMC-RP. Craig wrote "The Ultimate Guide To CMMC."
Raleigh, NC since 2002
5540 Centerview Dr., Suite 200, Raleigh, NC 27606. BBB A+ accredited since 2003. Read client reviews.
Quick answers
Who is Penny?
Penny is our AI assistant. She answers (919) 348-4912 around the clock, answers basic CMMC questions, takes your details and books your scoping call with a CMMC-RP. If you would rather speak with a person, ask her for a callback.
Is CMMC cancelled?
No. Phase 2 certification milestones are suspended while the Reform Task Force reviews the program. DFARS 252.204-7012, SPRS scoring under DFARS 252.204-7019 and Phase 1 self-assessments remain in force.
Can you certify us?
No, and no RPO can. Level 1 is a self-assessment you affirm. Level 2 is either a self-assessment or a C3PAO certification assessment, depending on your contract. We get you ready and help you post a score you can defend.
Which level do we need?
If you handle only Federal Contract Information, it is usually Level 1: the 15 basic safeguarding requirements in FAR 52.204-21. If you handle Controlled Unclassified Information, it is Level 2: the 110 requirements of NIST SP 800-171. Answering that for your contracts is the first thing the scoping call does.
What does the call cost, and what happens after it?
The scoping call is free and carries no obligation. If you want help, we send a fixed-scope quote within two business days. Pricing depends on how many systems and people touch contract data.
We already posted an SPRS score. Is this still useful?
Yes. A readiness assessment checks the posted number against the 110 requirements, so the score you represent to the government is one you can support. You can also recalculate it yourself first.
Why did we get a postcard?
We mailed it to companies that may do business with the Department of Defense. If it reached the wrong person, or you want no more mail from us, call (919) 348-4912 or reply through the form and we will take you off future mailings.
Where can I read more first?
See our full CMMC readiness assessment page, the ComplianceArmor® platform, or our CMMC compliance services.
Get your real CMMC starting point while the clock is paused
Twenty minutes with a CMMC-RP. No cost, no obligation.
Call (919) 348-4912 Book online