Smithers Achieves C3PAO Status for Enhanced Cybersecurity Services
Smithers, recognized as a premier provider of testing, consulting, information, and compliance services, has reached an important milestone by achieving authorized CMMC Third Party Assessor Organization (C3PAO) status. This credential, awarded by the Cyber Accreditation Body (Cyber-AB), allows Smithers to conduct third-party assessments for companies requiring CMMC level 2 certification mandated by the Department of Defense.
Authorization Process and High Standards
The authorization journey that Smithers went through was comprehensive and multifaceted. It entailed a rigorous process which included a license agreement, thorough organizational background checks, and an important assessment conducted by the Defense Industrial Base Cybersecurity Assessment Center (DIBCAC). Smithers has proactively established a high-security enclave specifically designed to manage Controlled Unclassified Information (CUI) with utmost care and protection during the assessment process.
Understanding CMMC and its Importance
As organizations in the defense sector prepare for the final implementation of the CMMC rule, which is anticipated to be finalized soon, the necessity for thorough third-party assessments compliant with the NIST SP 800-171r2 standard has grown. This standard is crucial for safeguarding CUI data, thereby protecting sensitive information integral to national security.
Leadership's Insight on C3PAO Status
Jeanette Preston, President of the Smithers Quality Assessments Division, reflected on the significance of achieving C3PAO status. “This accomplishment embodies a pivotal moment for our organization,” she stated. “With over three decades of experience as an accredited certification body, we possess the capability to offer our clients within the Defense Industrial Base rigorous assessments, comprehensive client service, and critical insights on their performance relative to the requirements.”
Additional Services Offered by Smithers
In addition to CMMC certifications, Smithers provides assessments for international standards such as ISO/IEC 27001, focusing on Information Security Management Systems (ISMS), and ISO/IEC 27701, which pertains to information privacy. These services enhance Smithers’ portfolio, demonstrating their commitment to promoting high standards of cybersecurity and data protection for their clientele.
Commitment to Cybersecurity
Michael Hochschwender, the Chief Executive Officer of Smithers, emphasized the alignment of cybersecurity assessment services with the company’s core competencies. “Our specialization in third-party conformity assessments positions us to effectively support contractors in obtaining reliable CMMC assessments. This not only helps them sustain their contracts with the Department of Defense but also strengthens their defenses against cybersecurity threats.”
Get in Touch with Smithers
For further information about the CMMC rule and Smithers' C3PAO status, interested parties can reach out to Robert McVay for inquiries. Smithers encourages businesses to leverage their expertise in navigating the complex landscape of cybersecurity assessments and compliance with evolving standards.
About Smithers
Founded in 1925 and based in Akron, Ohio, Smithers is a leading multinational provider of diverse testing, consulting, information, and compliance services. With operations spread across North America, Europe, and Asia, the company caters to an extensive range of industries including transportation, life sciences, packaging, materials, components, consumer products, cannabis, dry commodities, and energy. Smithers is committed to delivering precise data punctually by fusing scientific knowledge, technological innovation, and industry expertise, enabling clients to innovate confidently.
Frequently Asked Questions
What does C3PAO mean for Smithers?
Achieving C3PAO status allows Smithers to perform third-party assessments, particularly for clients needing CMMC level 2 certification to comply with Department of Defense standards.
How does Smithers ensure the protection of CUI?
Smithers has established a high-security enclave specifically for managing Controlled Unclassified Information (CUI) during assessments, ensuring its isolation and protection.
What is the CMMC rule?
The CMMC rule is a cybersecurity maturity model requiring defense contractors to undergo third-party assessments according to specific standards for safeguarding sensitive data.
What other certifications does Smithers provide?
In addition to CMMC assessments, Smithers provides ISO/IEC 27001 for information security management and ISO/IEC 27701 focused on information privacy.
How can companies contact Smithers for inquiries?
Companies interested in learning more about the CMMC rule and Smithers' services can reach out to Robert McVay for further information and assistance.
