Menu
$38.95
Select Quantity
In stock (can be backordered)
This CMMC Restricted Facility Sign is designed for use to give notice on facilities that are Cybersecurity Maturity Model Certification (CMMC) and NIST 800-171 compliant to denote restricted access for facilities or for work centers within facilities. This sign supports implementation for a certification in accordance with the requirements published by the Cybersecurity Maturity Model Certification Accreditation Body (CMMC-AB).
Manufactured specially for CVG Strategy, our 3M customized 7 x 10″ Aluminum “CMMC Restricted Facility Sign” is suitable for indoor or outdoor applications. This “CMMC Restricted Facility Sign” is specially made for those companies and facilities that are performing work and services that require CMMC Certification. This sign will be a part of CVG Strategy’s Consulting and Training Support for your CMMC Certification.
The CMMC Restricted Facility Sign front uses a custom 7 x 10″ 3M with title white on blue, with text black on white and black border showing the following text:
This “CMMC Restricted Facility Sign” has mounting holes for a wall or pole frame with one opening in each of the four corners.
Our “CMMC Restricted Facility Sign” is for use in indoor or outdoor applications.
Shipping is included for orders within the contiguous United States.
PE.L1-3.10.1 Limit physical access to organizational information systems, equipment, and the respective operating environments to authorized individuals.
NIST 800-171 3.10.1 Physical Access Authorizations
PE.L2-3.10.3 Protect and monitor the physical facility and support infrastructure for organizational systems.
NIST 800-171 3.10.2 Monitoring Physical Access
PE.L1-3.10.3 Escort visitors and monitor visitor activity.
NIST 800-171 3.10.7 Physical Access Control
This “CMMC Restricted Facility Sign” is used at many commercial facilities in the United States and are very necessary to warn visitors that the company is committed to its Cybersecurity Maturity Model (CMMC) Certification and NIST 800-171 and is protecting Confidential Unclassified Information (CUI). It will be controlling access to its buildings and operations. A CMMC Sign will serve as evidence of effort by the company who is seeking a certification that they have made a visible effort to limit physical access (PE.L1-3.10.1) and a policy to escort visitors and monitor visitor activity (PE.1.132) in accordance with the CMMC Model. CMMC Level 2 requires compliance to protect the physical monitor the facility (PE.L1-3.10.3).
THIS NOTICE SHOULD BE POSTED IN ALL COMMERCIAL FACILITIES WHERE CUI IS BEING PROTECTE IN PER US GOVERNMENT GUIDELINES IN ACCORDANCE WITH THE CMMC MODEL AND NIST 800-171.
The Office of the Under Secretary of Defense for Acquisition and Sustainment (OUSD(A&S)) recognizes that security is foundational to acquisition. It should not be traded along with cost, schedule, and performance moving forward. OUSD A&S is committed to working with the Defense Industrial Base (DIB) sector to enhance the protection of controlled unclassified information (CUI) within the supply chain. And to support the implementation of the Cybersecurity Maturity Model Certification (CMMC).
Cybersecurity Maturity Model Certification (CMMC) was developed to prevent supply chain attacks by bad actors. Cyberattacks on the contractors and suppliers to the U.S. government pose a serious national security threat of which the Department of Defense is focused mitigate risk. DOD tasked the National Institute of Science and Technology to develop a set of guidelines addressing advanced persistent threats that DOD suppliers face when they are handling high-value data assets also known as Controlled Unclassified Information or CUI. NIST released NIST 800-171 with the intention for its use in non-federal systems (private).
The NIST 800-171 publication provides a set of recommended security requirements for protecting CUI so that it remains confidential and controlled during receipt, storage or transfer. The Cybersecurity Maturity Model Certification (CMMC) is a next step based on the NIST 800-171 development with the difference in that a Certification is now possible. NIST 800-171 had no requirement for a certification.
Implementing the CMMC requirements for a Level 1 Basic Cyber Hygiene and Level 2 Intermediate Cyber Hygiene is a challenge for many companies who cybersecurity is a new thing. For other companies, this level is an intermediate cyber hygiene level. It will need to be satisfied first as they must complete additional requirements as they are move towards a CMMC Level 3 Good Cyber Hygiene Certification.
Currently, DOD Contractors are required by the Department of Defense DOD to comply at contract award with DFARS 252.2-04-7012 which requires NIST 800-171. CVG Strategy recommends that when company’s implement NIST 800-171 that it take into consideration these CMMC cybersecurity controls or security controls. CMMC requirements today, should be treated as a regulation supplement to NIST 800-171.
Certification to a CMMC Level should be considered a minimal goal for all DOD Contractors with the required practices and processes to be implemented in anticipation of a certification to an appropriate cyber hygiene level. DOD Contracts are expected to require CMMC for prime DOD contractors by Q1 2025 (or earlier). Prime DOD contractors are expected to flow this down to subcontractors who are handling CUI.
The CMMC Restricted Facility Sign should be used near all entrances to a company’s facilities and their use should be included in your policies and procedures which direct visitors to a central front desk for entry approval and tracking. Further, it is advised that a badging system be used to identify the security level for your visitors, which may be combined with your ITAR and EAR Compliance Program. Remember, a CMMC Sign is one element of a visible representation or evidence of your compliance with the CMMC Model.
