Guided CMMC Packages and Hands-on Assessment
Scoped to Your Systems, Priced in the Open
A kit gives you the guide and you do the work. A Guided package starts from your answers: we scope the checklist to the systems you actually use, write the plan, and go over it with you on a call. Guided packages are remote and document based, with no system access and no testing. Many suppliers start by searching for a CMMC consultant to run a gap assessment. A Guided package gives you that kind of help remotely, at a posted price, based on your answers and documents, and it is not a CMMC certification or an official assessment. Guided Level 1 is $1,995 and Guided Level 2 is $4,500. If you want us to test your actual systems, the Hands-on Assessment is quoted per company in a written proposal, from $9,000, on site in San Diego County and Orange County, and in Los Angeles County by arrangement. You contact us first with a few details about your company, and we confirm scope and fit in writing before you pay anything. If you already bought a kit, the full amount you paid is credited.
No payment is taken on this page until we have confirmed the scope in writing. These packages support your own self-assessment. They do not give you a CMMC certification or confer a CMMC Status.
Two Guided packages with fixed prices, and a quoted Hands-on Assessment
Guided Level 1 Package
Who it is for. A supplier with Federal Contract Information (FCI) that wants the Level 1 work scoped to its own systems and the remediation plan written for it.
- Scoping questions about your company, contracts, and systems, answered by email
- Checklist of the 15 Level 1 requirements scoped to what you actually use
- Completed remediation plan for the gaps your answers show
- Affirmation readiness review
- One 60 minute call
- If the deliverables miss the written scope, we correct them at no charge within 30 days of delivery. A refund applies only if we cannot deliver the package
- Remote and document based: no system access and no testing
- The full amount you paid for a kit is credited toward the price
Delivery. Within 10 business days, counted from the written scope confirmation and payment. The delivery date moves one business day for each business day we wait on your answers or documents.
Ask About Guided Level 1Guided Level 2 Package
Who it is for. A supplier with Controlled Unclassified Information (CUI) that wants the Level 2 work scoped and drafted for it.
- Scoping questions about your company, contracts, and systems, answered by email
- Checklist scoped to what you actually use
- Filled System Security Plan (SSP) outline
- Prioritized Plan of Action and Milestones (POA&M)
- Supplier Performance Risk System (SPRS) score estimate based on your answers
- One 90 minute call
- If the deliverables miss the written scope, we correct them at no charge within 30 days of delivery. A refund applies only if we cannot deliver the package
- Remote and document based: no system access and no testing
- The full amount you paid for a kit is credited toward the price
Delivery. Within 15 business days, counted from the written scope confirmation and payment. The delivery date moves one business day for each business day we wait on your answers or documents.
Ask About Guided Level 2Hands-on Assessment
Who it is for. A supplier that wants us to test its actual systems against the requirements, not only review its documents.
- We test your company's actual systems, using read-only access
- Fixed price in a written proposal before work begins, from $9,000
- 50 percent to begin and 50 percent on delivery of the findings report
- Complete findings package within two weeks once the deposit, signed scope, and access are in place
- On site in San Diego County and Orange County
- Los Angeles County by arrangement
- Outside that area, choose a Guided package, which is remote
- The full amount you paid for a kit is credited toward the quoted price
Delivery. Within two weeks once the deposit, the signed scope, and read-only access are in place. See the Hands-on terms below.
Ask for a Hands-on Quote| Where you are | What we offer |
|---|---|
| San Diego County | Hands-on Assessment on site, or a Guided package remotely |
| Orange County | Hands-on Assessment on site, or a Guided package remotely |
| Los Angeles County | Hands-on Assessment on site by arrangement, or a Guided package remotely |
| Anywhere else in the United States | Guided packages, remotely |
Upgrade credit. If you bought a kit and it became too confusing, the full amount you paid for it is credited toward a Guided package or a Hands-on Assessment. For example, the $297 Level 1 Kit credited toward Guided Level 1 at $1,995 leaves $1,698 to pay, and the $497 Level 2 Kit credited toward Guided Level 2 at $4,500 leaves $4,003 to pay. If you bought a kit with a review call, the full amount you paid is credited. One credit for each kit purchase. The credit is valid for 12 months from the kit purchase date and is void if the kit is refunded.
Five steps, and you pay after the scope is confirmed
Contact us
Email or call us with the company details listed below. It is free, and it does not commit you to buy.
We confirm scope and fit
Thabiti Adams reads what you send and replies in writing within 2 business days with the package that fits, or tells you if a kit is a better choice. For a Hands-on Assessment, the reply includes a written proposal with a fixed price.
Pay by secure link
If you agree to the scope, you pay through a Stripe payment link that we send you with the written scope confirmation. The price is the published price, less any kit credit. A Hands-on Assessment is not paid by link. We send an invoice when you accept the written proposal in writing, and you pay by bank transfer (ACH) or check, as set out in the Hands-on terms.
We build your deliverables
You receive the completed documents by email within the delivery window.
Review on a call
We go over the deliverables on one call and answer your questions.
What a Guided package and a Hands-on Assessment do and do not do
Neither one certifies you, and neither is legal advice.
Guided packages. The deliverables are built from the answers and documents you give us. Guided packages are remote and document based. We do not log in to your systems, scan them, or test them, and we cannot verify that your answers are complete or correct. The score estimate in the Guided Level 2 Package is an estimate based on your answers and is not a validated score.
Hands-on Assessment. In a Hands-on Assessment we test your company's actual systems. The scope, what is and is not included, and the price are written in a proposal for your company before any work starts. It is on site in San Diego County and Orange County, and in Los Angeles County by arrangement. The terms are in the section below.
No package or assessment from us gives your company a CMMC certification, and none of them confers a CMMC Status. A self-assessment status comes only from your own completed self-assessment and affirmation, entered by your company in SPRS. Nothing here is legal advice. A senior official of your company affirms the result under the CMMC rule (Title 32 of the Code of Federal Regulations, Part 170) and affirms continuing compliance every year. That official is responsible for the accuracy of the statement, and a false or inaccurate affirmation can create liability under the False Claims Act (Title 31 of the United States Code, sections 3729 to 3733). We do not make the affirmation, and we do not enter your results in SPRS.
The Guided packages do not include fixing your technical settings, installing software, or representing your company to the Department of Defense or a prime contractor. The written proposal for a Hands-on Assessment states what it includes. If your contract requires an assessment by a Certified Third-Party Assessment Organization, only that official process produces the result. We do not guarantee any score, assessment outcome, or contract award.
Adams Cloud and Cybersecurity LLC is not affiliated with, endorsed by, or authorized by the Department of Defense, The Cyber AB, or ISACA. CMMC Certified Professional (CCP) is a credential issued to an individual by ISACA. These products are not a CMMC assessment and do not provide or imply any CMMC Status.
How a Hands-on Assessment works and what it costs
- Price. A fixed price stated in a written proposal before any work begins. It starts at $9,000, and the price depends on scope.
- Payment. 50 percent to begin, and the remaining 50 percent on delivery of the findings report. Payment is by bank transfer (ACH) or check. We send the invoice when you accept the proposal in writing, and work begins once we receive the deposit.
- Written scope first. Before the assessment begins, you sign a one-page assessment boundary worksheet that lists the people, systems, and data in scope.
- Access. Read-only access to the systems in scope, for example a read-only Microsoft 365 assessment account. We make no changes to your environment during the assessment.
- What you receive. The assessment is measured against all 110 requirements of National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 Revision 2 and their 320 assessment objectives. You receive a findings report that scores each requirement as met, partially met, or not met; the current Supplier Performance Risk System (SPRS) score, confirmed and explained; a prioritized remediation roadmap; and a firm fixed price for any remediation work, which is separate and optional.
- Timeline. We complete the findings package within two weeks once the deposit, the signed scope, and the access are in place.
- Where. On site in San Diego County and Orange County, and in Los Angeles County by arrangement. Any travel cost is stated in the written proposal.
- Cancellation. If you cancel before work begins, we refund the deposit in full. After work begins, the deposit is not refundable, and you owe the balance only if we deliver the findings report.
- Upgrade credit. The full amount you paid for a kit is credited toward the Hands-on price.
- What it is not. We do not promise a score, a pass, a certification, or a contract award.
Tell us about your company
Email or call. There is no form to fill in, and contacting us does not commit you to buy.
Email: thabiti@adamscloudcyber.com
Telephone: (619) 289-8064
In your first message, please tell us as much of the following as you can. If you do not know an answer, say so, and we will ask.
- Which package interests you: Guided Level 1, Guided Level 2, a Hands-on Assessment, or not sure yet.
- Your company legal name, your name, and your role.
- The number of employees, and the city, county, and state of each office, shop, or site. For a Hands-on Assessment, the county of each site matters most.
- Which contract clauses appear in a contract or subcontract you hold or are bidding on: Federal Acquisition Regulation (FAR) 52.204-21, Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012, 252.204-7019, 252.204-7020, or 252.204-7021. If you are not sure, say so.
- Whether you handle Federal Contract Information (FCI) only, or also Controlled Unclassified Information (CUI).
- The systems you use, in general terms: Microsoft 365 commercial, Microsoft 365 Government Community Cloud (GCC), Microsoft 365 GCC High, Google Workspace, on-premises servers, or others.
- Who manages your information technology: an owner or manager, an employee, an outside provider, or a mix.
- Whether you already have a System Security Plan (SSP) or a Plan of Action and Milestones (POA&M), and your current Supplier Performance Risk System (SPRS) score if you have one.
- The earliest date you need to be ready, and what drives it, such as a contract award or a prime contractor request.
Please do not send controlled information.
Do not send Controlled Unclassified Information, Federal Contract Information documents, passwords, network diagrams with addresses, or technical data. Describe your systems in general terms.
We reply in writing within 2 business days with the package that fits and the scope we propose. You pay nothing until you agree to that scope. We use what you send only to read your situation, to reply to you in writing, and to prepare the package or quote if you buy one. We do not sell your information or share it for advertising. We keep it for 2 years. See our privacy policy and the kit terms.
How you pay for a Guided package
We send your payment link with the written scope confirmation, at the published price less any kit credit we confirmed. Please do not pay before the scope is confirmed. A Hands-on Assessment is not paid by link; it follows its written proposal and invoice.
Need an invoice or an Internal Revenue Service (IRS) Form W-9 for your purchasing department? Email thabiti@adamscloudcyber.com.
Not Sure Which One Is Right for You?
If you can do the work yourself with a clear guide, a kit costs less, and its full price is credited if you later move to a Guided package or a Hands-on Assessment. Compare every tier, or book a free consultation to talk it through.