Globe-America Consulting
The C3 Kit
Compliant. Cybersecure. Contract Ready. A free compliance check for defense and federal contractors. Tell us who your customer is, then complete three short modules to receive a requirement determination, a readiness score, a timeline and investment estimate, and the path we would recommend.
Readiness Scorecard
Determine which requirements apply, then self-assess across eight NIST SP 800-171 families.
C3 Score Estimator
An indicative NIST 800-171 readiness score built on the Department of War's 1/3/5 weighted methodology.
Timeline & Cost
Get a realistic project timeline and compliance investment estimate based on your gap level.
Who is your customer? Choose one to set the questions and the vocabulary for the rest of the kit.
Module 1 of 3
Readiness Scorecard
First confirm which requirements your contract actually carries, then answer each question based on your organization's current state. Be candid: this is a diagnostic, not a test.
Requirement determination
Which of these appear in your contract or your prime's flow-down? Check all that apply.
Select aboveYour requirement set will appear here.
Access Control
Does your organization limit system access to authorized users and control what those users are permitted to do?
Identification & Authentication
Are unique user IDs and multi-factor authentication (MFA) enforced for systems that process federal contract information?
Configuration Management
Does your organization maintain secure baseline configurations and have a formal process to control changes?
Incident Response
Does your organization have a documented incident response plan and capability to detect, report, and respond to cybersecurity incidents?
System & Communications Protection
Is data encrypted in transit and at rest? Are network boundaries monitored and controlled?
Risk Assessment
Does your organization periodically assess risk and document findings in a risk register or POA&M?
CUI Handling & Media Protection
Is Controlled Unclassified Information (CUI) identified, labeled, and protected from unauthorized access or disclosure?
Awareness & Training
Are employees trained on cybersecurity responsibilities, including recognizing threats and handling sensitive information?
Module 2 of 3
C3 Score Estimator
User permissions, least privilege, remote access (22 practices)
Logging, monitoring, audit trail (9 practices)
Secure baselines and change control (9 practices)
User IDs, passwords, MFA enforcement (11 practices)
Detection, reporting, response (3 practices)
Risk assessments and POA&M (3 practices)
Encryption, monitoring, boundary (16 practices)
Malware, patching, alerts (7 practices)
Module 3 of 3
Timeline, Investment & Your Package
Based on your scorecard responses, here is an estimated project timeline, compliance investment range, and the Globe-America service package best suited for your organization.
📅 Readiness Assessment Project Timeline
Estimated weeks to reach assessment-ready status, based on your current gap level. All timelines assume active engagement and timely evidence delivery.
Estimated Total Timeline
—
💰 Compliance Investment Estimator
Estimated investment based on your readiness gap, mapped to the Globe-America engagement best suited to your organization. Final scope is confirmed in a written proposal. Consider the alternative: a failed assessment or a lost award costs far more than the remediation.
Estimated Investment Range
—
Recommended Service Package
Based on your gap level, one engagement below is highlighted as the best fit. Every engagement combines the tool portal with included advisory hours from a CMMC Registered Practitioner, starts with a consultation, and is confirmed in a written proposal before work begins.
* Indicative ranges assume 25–200 endpoints, 1–3 sites, and a standard Microsoft 365 environment. Changes in scope may require a change order. Clients purchase security tools directly.
Ask Us About Managed Security Support
Managed EDR, SIEM, and 24×7 SOC/MDR services are available as optional add-ons through vetted third-party providers under Globe-America governance. Indicative add-on pricing: Managed EDR $8–$14/endpoint/mo · Managed SIEM $3,000–$7,000/mo · 24×7 SOC/MDR $8–$15/asset/mo. These can be added at any stage. Explore MSSP Advisory →
Your Personalized Assessment
C3 Results Report
Your complete compliance snapshot: requirement determination, readiness score, C3 Score, recommended next steps, and your path forward with Globe-America.
Globe-America Consulting, Inc.
SDVOSB · Dallas-Fort Worth, TX · globe-america.com
C3 Compliance Kit Report · Confidential ·
Generated:
Ready to Close Your Gaps?
Globe-America Consulting provides practical, affordable compliance readiness support for defense and federal contractors. Schedule your free discovery call and let's build your compliance roadmap — and lock in your $2,500 discount before it expires.
Schedule a Free Discovery Call