OKC-based company earns rare DOD cybersecurity status
Guernsey, located at 5555 N. Grand Blvd. in Oklahoma City, is the first company in Oklahoma and one of only eight in the United States currently authorized to conduct Cybersecurity Maturity Model Certification assessments of companies as an anticipated requirement of the Department of Defense. (Courtesy photo)
An Oklahoma company is among a handful in the nation that have been authorized to assess the cybersecurity preparedness of other businesses hoping to garner contracts with the U.S. Department of Defense.
According to a release, Guernsey, located at 5555 N. Grand Blvd. in Oklahoma City, is the first company in Oklahoma and one of only eight in the nation currently authorized to conduct Cybersecurity Maturity Model Certification, or CMMC, assessments of companies as an anticipated requirement of the DOD.
“Guernsey first started participating in the CMMC ecosystem in March 2020 and began the application process back in October 2020,” Guernsey Director of Cybersecurity Consulting Timothy Fawcett said. “After a lengthy process, we have now earned (that) distinction … helping Oklahoma standout as a friendly place for the DOD to do business.”
The DOD created the CMMC program in response to increasingly frequent and severe cyberattacks against defense industry businesses and contractors. Intentions are to protect intellectual property, trade secrets, and other sensitive information, Guernsey said.
“Cybersecurity is more critical now than ever, and these CMMC assessments will help companies performing and seeking DOD contracts get ahead of federal requirements,” Fawcett said. “As a DOD contractor that’s passed a CMMC Level 2 Assessment required to become a third-party assessor organization, we know how to get through the assessment and will be a beneficial asset to other companies that need to implement CMMC or desire the peace of mind that comes from a CMMC-grade cybersecurity training and review.”
According to the release, the DOD announced in November 2021 an upgrade to the CMMC program. While it is not yet allowing assessments, it is indicated that authorized third-party assessor organizations will be able to start performing voluntary assessments.
Guernsey’s authorization qualifies it to consult with and make recommendations for businesses as they prepare for assessment.
Once the DOD permits assessments, Guernsey will lead and perform CMMC Level 2 assessments, it said. Already, the company has provided a CMMC 2.0 Readiness Tool on its website, https://www.guernsey.us/cmmc.
To learn more about CMMC and what Guernsey’s authorization means for businesses, visit the Guernsey Blog.
Guernsey traces its roots to 1928, when civil engineer Curtis Guernsey Sr. founded the consulting firm in Cherokee, Oklahoma. In ensuing years, the company provided engineering services for rural electric cooperatives, the U.S. Army Corps of Engineers, and military facilities. Among other things, it designed numerous electric generation stations, eventually expanding into telecommunications, architectural and construction management, and environmental, security and cybersecurity services. Now based in Oklahoma City, Guernsey continues to provide a range of engineering, architecture and consulting services to multiple markets ranging from oil and gas to sports and entertainment. Clients include tribal governments, municipalities, and local, state, and federal agencies, and international entities.
Gloss