CORE Vault ®
“The overall experience was superb! The Core Business Solutions team had our vault environment up within a week. Our expert consultant had our system security plan project planned out and ready for execution within the first week of starting. The technical and policy expert staff were knowledgeable, courteous, and attentive to our business situation…We greatly appreciate our Core Business Solution team for helping us achieve compliance…”
-nGAP Incorporated on Birdeye
About CORE Vault for NIST CMMC
Everything you need for NIST/CMMC in one cloud-based solution. The CORE Vault CUI Enclave and Consulting Services.
If you contract with the Department of Defense, you require advanced cybersecurity protections. To comply with DFARS, you must meet the requirements of NIST SP 800-171. Soon, DoD contractors will also need to meet the requirements of Cybersecurity Maturity Model Certification (CMMC 2.0). However, most contractors don’t have the resources to overhaul their entire network for compliance. With CORE Vault, you don’t have to.
With CORE Vault, you can separate government data from your network and access it through a secure, cloud-based environment managed by our cyber experts.
CORE Vault also includes the support needed to reach full compliance with the non-technical cybersecurity requirements, such as your system security plan and required policies.
We’ve seen contractors achieve their maximum DoD-required SPRS score in 30 days.
CMMC Made Simple
All DoD contractors must submit a self-assessment score to the Supplier Performance Risk System (SPRS). The optimal SPRS score shows compliance with all 110 requirements of NIST SP 800-171. However achieving these requirements and producing a SPRS score poses a frustrating, technically-challenging task for most small businesses. Out of the box, CORE Vault makes you compliant with 82 of 110 NIST/CMMC requirements. We provide resources and support to cover the rest.
That’s why CORE Vault comes with the CORE Security Suite, including customizable policy templates, automated forms, and a SPRS score calculator.
An expert consultant will work hands-on to help you meet any remaining requirements and achieve the maximum SPRS score.
Get a Free Quote
NIST/CMMC
CMMC (Cybersecurity Maturity Model Certification) v2.0 was revealed in November 2021. CMMC focuses on the security and resiliency of the DIB according to the OUSD (A&S) and the DoD. The official CMMC rollout will occur over several years to encompass all contracts and suppliers. In the meantime, contractors must conduct a self-assessment of their NIST SP 800-171 compliance and submit the results through the Supplier Performance Risk System (“SPRS”). DoD contractors should start preparing now for CMMC to keep their contracts in the future.
Let us Handle Compliance so You can Focus on Your Business
This solution can simplify security for any company handling sensitive information, even if you don’t work with the DoD. Ask us how CORE Vault can be customized to fit your needs.
CORE Vault provides each user with a secure virtual PC, accessible from almost any computer or device. This virtual environment comes ready-made to store and transmit Controlled Unclassified Information (CUI) and Federal Contract Information (FCI).
Our CMMC-AB Registered Practitioners actively manage your CORE Vault, keeping up to date with ever-changing cyber threats and government requirements.
Technical Specifications
CORE Vault Technical Specs
- VDI (Virtual Desktop Infrastructure) remote desktop (Windows 10 with 100 GB encrypted storage)
- Hosted in FedRAMP authorized and equivalent environments
- MS Office GCC High
- Secure Encrypted Email
- Network Security includes firewalls, intrusion detection/ prevention systems (IDS/IPS)
- FIPS 140-2 Validated Encryption
- Segregated Backup and Recovery
- SIEM/SOC (Security Information and Event Management, 24×7 Security Operations Center)
- User Access Controls
- Maintenance and Patching
CORE Vault Technical Specs
- Vulnerability Scanning
- Web Filtering
- Multifactor Authentication (MFA)
- Antivirus/Endpoint Detection and Response (EDR)
- Secure Encrypted File Sharing
- Data Loss Prevention (DLP)
- Incident Response support
- CORE Security Suite
- Ability to support local printing and data exchange for your operational technology (CNC machines, etc.),if needed
Annual Support
- Provision of required security policies with guidance on modification for company use
- Consultant guidance for policy implementation
- Consultant guidance for implementation of the CORE Vault solution
- Initial completion of the SSP and POAM
- Annual SSP and POAM update/review
- Annual review of SPRS score
- Employee Security Training
About Core Business Solutions
For over twenty years, Core Business Solutions has helped small businesses achieve success by combining cloud-based tools with expert consulting. Our cybersecurity experts bring decades of industry experience to every project. We are a CMMC-AB recognized Registered Provider Organization.
