{"id":1736,"date":"2026-07-10T17:13:08","date_gmt":"2026-07-10T21:13:08","guid":{"rendered":"https:\/\/augustschell.com\/?page_id=1736"},"modified":"2026-07-21T17:04:00","modified_gmt":"2026-07-21T21:04:00","slug":"c3pao-assessment","status":"publish","type":"page","link":"https:\/\/augustschell.com\/cmmc-4\/c3pao-assessment\/","title":{"rendered":"C3PAO Assessment"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n<div class=\"wp-block-group alignfull\">\n\n\n<!doctype html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<!-- Google tag (gtag.js) \u2014 GA4 -->\n<script async src=\"https:\/\/www.googletagmanager.com\/gtag\/js?id=G-RJ89DWN9EC\"><\/script>\n<script>\n  window.dataLayer = window.dataLayer || [];\n  function gtag(){dataLayer.push(arguments);}\n  gtag('js', new Date());\n  gtag('config', 'G-RJ89DWN9EC');\n<\/script>\n<title>CMMC Level 2 C3PAO Assessment | August Schell<\/title>\n<meta name=\"description\" content=\"Authorized CMMC C3PAO. August Schell runs the Mock + Certification path to CMMC Level 2 with all-W-2, in-house Lead CCAs. Request an assessment.\">\n<link rel=\"icon\" type=\"image\/svg+xml\" href=\"assets\/ase-icon-2023.svg\">\n<meta property=\"og:title\" content=\"CMMC Level 2 C3PAO Assessment | August Schell\">\n<meta property=\"og:description\" content=\"Authorized CMMC C3PAO. Mock + Certification assessments against the 110 controls of NIST SP 800-171, run by all-W-2, in-house Lead CCAs.\">\n<meta property=\"og:type\" content=\"website\">\n<meta property=\"og:url\" content=\"https:\/\/augustschell.com\/cmmc\/c3pao-assessment\/\">\n<meta property=\"og:image\" content=\"https:\/\/augustschell.com\/cmmc\/c3pao-assessment\/assets\/hero-datacenter.webp\">\n<link rel=\"preload\" href=\"fonts\/spectral-latin-600-normal.woff2\" as=\"font\" type=\"font\/woff2\" crossorigin>\n<link rel=\"preload\" href=\"fonts\/open-sans-latin-400-normal.woff2\" as=\"font\" type=\"font\/woff2\" crossorigin>\n<script type=\"application\/ld+json\">\n{\n  \"@context\": \"https:\/\/schema.org\",\n  \"@graph\": [\n    {\n      \"@type\": \"Service\",\n      \"name\": \"CMMC Level 2 C3PAO Certification Assessment\",\n      \"serviceType\": \"CMMC Third-Party Assessment (C3PAO)\",\n      \"provider\": {\n        \"@type\": \"Organization\",\n        \"name\": \"August Schell\",\n        \"url\": \"https:\/\/augustschell.com\/\",\n        \"telephone\": \"+1-301-838-9470\",\n        \"address\": {\n          \"@type\": \"PostalAddress\",\n          \"streetAddress\": \"1700 Rockville Pike, Suite 405\",\n          \"addressLocality\": \"Rockville\",\n          \"addressRegion\": \"MD\",\n          \"postalCode\": \"20852\",\n          \"addressCountry\": \"US\"\n        }\n      },\n      \"areaServed\": \"United States\",\n      \"description\": \"Formal CMMC Level 2 certification assessments against the 110 controls of NIST SP 800-171, performed by an authorized C3PAO with all-W-2, in-house Lead CCAs.\"\n    },\n    {\n      \"@type\": \"FAQPage\",\n      \"mainEntity\": [\n        {\"@type\":\"Question\",\"name\":\"What is a C3PAO?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"A CMMC Third-Party Assessment Organization authorized by the Cyber AB to perform formal CMMC Level 2 certification assessments. August Schell is an authorized C3PAO, authorized by the Cyber AB following a DIBCAC assessment.\"}},\n        {\"@type\":\"Question\",\"name\":\"What is a CMMC mock assessment?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"A full dry run against all 110 NIST SP 800-171 controls that produces a Met \/ Not Met report with evidence \u2014 so you find and fix gaps before the assessment that counts. It is our most-requested service.\"}},\n        {\"@type\":\"Question\",\"name\":\"Why can't my C3PAO also fix my gaps?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Independence. The firm that certifies you cannot have remediated the environment it is grading \u2014 that is a Cyber AB conflict-of-interest rule. Your RPO handles remediation.\"}},\n        {\"@type\":\"Question\",\"name\":\"How long does it take?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Plan for at least three months: roughly 4\u20138 weeks of assessment work plus the government and Cyber AB review that follows.\"}},\n        {\"@type\":\"Question\",\"name\":\"How long is certification valid?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Three years, with an annual affirmation recorded in SPRS.\"}},\n        {\"@type\":\"Question\",\"name\":\"What is the most common reason organizations fail?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Showing up without a complete SSP, poorly defined scope, or policies that don't match actual practice.\"}}\n      ]\n    }\n  ]\n}\n<\/script>\n<style>\n\/* ============ FONTS (self-hosted) ============ *\/\n@font-face{font-family:'Spectral';src:url('fonts\/spectral-latin-500-normal.woff2') format('woff2');font-weight:500;font-style:normal;font-display:swap}\n@font-face{font-family:'Spectral';src:url('fonts\/spectral-latin-600-normal.woff2') format('woff2');font-weight:600;font-style:normal;font-display:swap}\n@font-face{font-family:'Spectral';src:url('fonts\/spectral-latin-700-normal.woff2') format('woff2');font-weight:700;font-style:normal;font-display:swap}\n@font-face{font-family:'Open Sans';src:url('fonts\/open-sans-latin-400-normal.woff2') format('woff2');font-weight:400;font-style:normal;font-display:swap}\n@font-face{font-family:'Open Sans';src:url('fonts\/open-sans-latin-500-normal.woff2') format('woff2');font-weight:500;font-style:normal;font-display:swap}\n@font-face{font-family:'Open Sans';src:url('fonts\/open-sans-latin-600-normal.woff2') format('woff2');font-weight:600;font-style:normal;font-display:swap}\n@font-face{font-family:'Open Sans';src:url('fonts\/open-sans-latin-700-normal.woff2') format('woff2');font-weight:700;font-style:normal;font-display:swap}\n\n\/* ============ TOKENS \u2014 ASE brand system (canonical, 2026-06-12) ============ *\/\n:root{\n  --navy:#1B3663;          \/* Asahi navy \u2014 primary *\/\n  --navy-deep:#122546;     \/* derived dark ground *\/\n  --navy-ink:#0D1B33;      \/* deepest hero ground *\/\n  --ink:#231F20;           \/* near-black text *\/\n  --slate:#3E4959;         \/* secondary text *\/\n  --accent:#2DABE0;        \/* accent ONLY \u2014 never text on light *\/\n  --paper:#FAF9F5;\n  --paper-2:#F1EFE8;\n  --line:rgba(27,54,99,.16);\n  --line-dark:rgba(255,255,255,.14);\n  --display:'Spectral',Georgia,serif;\n  --body:'Open Sans',system-ui,sans-serif;\n}\n*{margin:0;padding:0;box-sizing:border-box}\nhtml{scroll-behavior:smooth;font-size:112.5%}\nbody{font-family:var(--body);font-size:1rem;line-height:1.65;color:var(--ink);background:var(--paper);-webkit-font-smoothing:antialiased;text-rendering:optimizeLegibility}\nimg{max-width:100%;display:block}\na{color:inherit}\n::selection{background:var(--navy);color:#fff}\n\nh1,h2,h3{font-family:var(--display);font-weight:600;line-height:1.08;letter-spacing:-.015em;color:var(--navy);text-wrap:balance}\nh1{font-size:clamp(2.3rem,4.6vw,3.4rem)}\nh2{font-size:clamp(1.7rem,3vw,2.35rem)}\nh3{font-size:1.22rem;line-height:1.3}\np{max-width:62ch;text-wrap:pretty}\n.num{font-variant-numeric:tabular-nums}\n\n.skip{position:absolute;left:-9999px;top:0;background:var(--navy);color:#fff;padding:.6rem 1rem;z-index:99;font-size:.85rem}\n.skip:focus{left:0}\n:focus-visible{outline:2px solid var(--accent);outline-offset:3px}\n\n.wrap{max-width:1240px;margin:0 auto;padding:0 clamp(1.25rem,4vw,3rem)}\n.eyebrow{font-size:.72rem;font-weight:700;letter-spacing:.16em;text-transform:uppercase;color:var(--slate);display:flex;align-items:center;gap:.75rem}\n.eyebrow::before{content:'';width:2rem;height:1px;background:var(--accent)}\n.eyebrow .idx{color:var(--navy);font-weight:700}\n.dark .eyebrow{color:rgba(255,255,255,.62)}\n.dark .eyebrow .idx{color:var(--accent)}\n\n\/* reveal *\/\n.rv{opacity:0;transform:translateY(12px);transition:opacity .6s cubic-bezier(.16,1,.3,1),transform .6s cubic-bezier(.16,1,.3,1);transition-delay:calc(var(--i,0)*80ms)}\n.rv.in{opacity:1;transform:none}\n@media(prefers-reduced-motion:reduce){.rv{opacity:1;transform:none;transition:none}html{scroll-behavior:auto}}\n\n\/* buttons *\/\n.btn{display:inline-block;font-family:var(--body);font-weight:600;font-size:.92rem;padding:.85rem 1.7rem;border:1px solid transparent;cursor:pointer;text-decoration:none;transition:background .2s,color .2s,border-color .2s;line-height:1.3}\n.btn:active{transform:scale(.98)}\n.btn-primary{background:var(--accent);color:var(--navy-ink);border-color:var(--accent)}\n.btn-primary:hover{background:#49b9e6}\n.btn-ghost{background:transparent;color:#fff;border-color:rgba(255,255,255,.4)}\n.btn-ghost:hover{border-color:#fff}\n.btn-navy{background:var(--navy);color:#fff;border-color:var(--navy)}\n.btn-navy:hover{background:#234479}\n.btn-outline{background:transparent;color:var(--navy);border-color:var(--navy)}\n.btn-outline:hover{background:var(--navy);color:#fff}\n\n\/* ============ HEADER ============ *\/\nheader{position:sticky;top:0;z-index:50;background:var(--paper);border-bottom:1px solid var(--line)}\n.nav{display:flex;align-items:center;justify-content:space-between;height:72px}\n.nav .logo img{height:34px;width:auto}\n.nav-links{display:flex;align-items:center;gap:2rem;list-style:none}\n.nav-links a{font-size:.88rem;font-weight:500;color:var(--slate);text-decoration:none;transition:color .2s}\n.nav-links a:hover{color:var(--navy)}\n.nav .btn{padding:.6rem 1.2rem;font-size:.85rem}\n.nav-links a.btn-navy{color:#fff}\n.nav-links a.btn-navy:hover{color:#fff;background:#234479}\n.nav-toggle{display:none;background:none;border:1px solid var(--line);padding:.45rem .6rem;cursor:pointer;font-size:.8rem;font-weight:600;color:var(--navy)}\n@media(max-width:880px){\n  .nav-links{display:none;position:absolute;top:72px;left:0;right:0;background:var(--paper);flex-direction:column;align-items:flex-start;padding:1.25rem clamp(1.25rem,4vw,3rem) 1.5rem;gap:1.1rem;border-bottom:1px solid var(--line)}\n  .nav-links.open{display:flex}\n  .nav-toggle{display:block}\n}\n\n\/* ============ HERO ============ *\/\n.hero{position:relative;background:var(--navy-ink);color:#fff;overflow:hidden}\n.hero-img{position:absolute;inset:0;background:url('https:\/\/augustschell.com\/wp-content\/uploads\/2026\/07\/hero-datacenter.webp') center right\/cover no-repeat}\n.hero-img::after{content:'';position:absolute;inset:0;background:linear-gradient(90deg,#0D1B33 0%,rgba(13,27,51,.92) 34%,rgba(13,27,51,.45) 62%,rgba(13,27,51,.18) 100%)}\n.hero-inner{position:relative;min-height:min(88vh,820px);display:grid;grid-template-columns:minmax(0,7fr) minmax(0,5fr);align-items:center;padding-top:7rem;padding-bottom:6rem}\n.hero h1{color:#fff;max-width:17ch;margin:1.4rem 0 1.5rem;font-size:clamp(2.4rem,4.8vw,3.7rem)}\n.hero .sub{font-size:1.06rem;line-height:1.7;color:rgba(255,255,255,.82);max-width:52ch;margin-bottom:2.2rem}\n.hero .ctas{display:flex;gap:1rem;flex-wrap:wrap;align-items:center}\n.hero .tel{font-size:.88rem;color:rgba(255,255,255,.66)}\n.hero .tel a{color:#fff;text-decoration:none;font-weight:600}\n.hero .tel a:hover{text-decoration:underline}\n\/* hero readiness teaser (right column) *\/\n.hero-tease{justify-self:end;align-self:center;width:min(480px,100%);border:1px solid rgba(255,255,255,.22);background:rgba(13,27,51,.55);backdrop-filter:blur(2px);padding:2.3rem 2.4rem;text-decoration:none;display:block;color:#fff;transition:border-color .2s,background .2s}\n.hero-tease:hover{border-color:var(--accent);background:rgba(13,27,51,.72)}\n.hero-tease .ht-eyebrow{font-size:.74rem;font-weight:700;letter-spacing:.16em;text-transform:uppercase;color:var(--accent);margin-bottom:.85rem}\n.hero-tease .ht-q{font-family:var(--display);font-weight:600;font-size:1.55rem;line-height:1.25;margin-bottom:.65rem}\n.hero-tease .ht-s{font-size:.95rem;color:rgba(255,255,255,.68);margin-bottom:1.5rem}\n.hero-tease .ht-dims{display:flex;flex-direction:column;gap:.75rem;margin-bottom:1.6rem}\n.hero-tease .ht-d{display:grid;grid-template-columns:96px 1fr;align-items:center;gap:.9rem;font-size:.74rem;letter-spacing:.1em;text-transform:uppercase;color:rgba(255,255,255,.6)}\n.hero-tease .ht-d i{display:block;height:3px;background:rgba(255,255,255,.16);position:relative}\n.hero-tease .ht-d i::after{content:'';position:absolute;left:0;top:0;bottom:0;width:var(--w,40%);background:var(--accent);opacity:.85}\n.hero-tease .ht-go{font-size:.95rem;font-weight:600;color:#fff;border-bottom:1px solid var(--accent);padding-bottom:2px}\n.hero-tease:hover .ht-go{color:var(--accent)}\n@media(max-width:1100px){.hero-tease{display:none}}\n@media(min-width:1101px){.hero .ctas .btn-ghost{display:none}}\n.hero-cred{position:relative;border-top:1px solid var(--line-dark);background:rgba(13,27,51,.45)}\n.hero-cred .row{display:grid;grid-template-columns:repeat(5,minmax(0,1fr));gap:0 3rem;padding-top:1.6rem;padding-bottom:1.5rem}\n.hero-cred .row .c .k{font-family:var(--display);font-weight:600;font-size:1.6rem;color:#fff;line-height:1.15}\n.hero-cred .row .c .v{font-size:.74rem;letter-spacing:.11em;text-transform:uppercase;color:rgba(255,255,255,.62);margin-top:.3rem}\n@media(max-width:880px){.hero-cred .row{grid-template-columns:repeat(2,1fr);gap:1.2rem 2rem}}\n@media(max-width:880px){.hero-inner{grid-template-columns:1fr;padding-top:5rem;padding-bottom:4rem}}\n\n\/* ============ FILMSTRIP ============ *\/\n.filmstrip{position:relative;height:clamp(220px,34vh,360px);background:url('https:\/\/augustschell.com\/wp-content\/uploads\/2026\/07\/filmstrip-facility.webp') center\/cover no-repeat}\n.filmstrip::after{content:'';position:absolute;inset:0;background:linear-gradient(180deg,rgba(13,27,51,.35),rgba(13,27,51,.55))}\n.filmstrip .tag{position:absolute;left:0;right:0;bottom:0}\n.filmstrip .tag .wrap{display:flex;justify-content:space-between;align-items:baseline;padding-top:.9rem;padding-bottom:.9rem;border-top:1px solid rgba(255,255,255,.25);color:rgba(255,255,255,.85);font-size:.78rem;letter-spacing:.12em;text-transform:uppercase;position:relative;z-index:1}\n\n\/* ============ SECTIONS ============ *\/\nsection{padding:clamp(4rem,8vw,7rem) 0 clamp(5rem,9vw,8rem)}\n.sec-head{display:grid;grid-template-columns:minmax(0,5fr) minmax(0,7fr);gap:2rem 4rem;margin-bottom:clamp(2.5rem,5vw,4rem)}\n.sec-head h2{margin-top:1.1rem}\n.sec-head .lede{font-size:1.05rem;color:var(--slate);align-self:end}\n@media(max-width:880px){.sec-head{grid-template-columns:1fr}}\n\n\/* mandate *\/\n.mandate{background:var(--paper)}\n.mandate-grid{display:grid;grid-template-columns:minmax(0,7fr) minmax(0,5fr);gap:3rem 5rem}\n.mandate-grid .big{font-family:var(--display);font-size:clamp(1.25rem,2vw,1.55rem);line-height:1.45;color:var(--navy);font-weight:500;max-width:30ch}\n.mandate-facts{border-left:1px solid var(--line);padding-left:2.2rem;display:flex;flex-direction:column;gap:1.6rem}\n.mandate-facts .f .k{font-family:var(--display);font-weight:600;font-size:1.9rem;color:var(--navy);line-height:1.1}\n.mandate-facts .f .v{font-size:.86rem;color:var(--slate);margin-top:.2rem;max-width:34ch}\n@media(max-width:880px){.mandate-grid{grid-template-columns:1fr}.mandate-facts{border-left:none;padding-left:0;border-top:1px solid var(--line);padding-top:1.6rem}}\n\n\/* path *\/\n.path{background:var(--navy);color:#fff}\n.path h2,.path h3{color:#fff}\n.path .sec-head .lede{color:rgba(255,255,255,.72)}\n.steps{display:flex;flex-direction:column}\n.step{display:grid;grid-template-columns:88px minmax(0,4fr) minmax(0,7fr);gap:1.5rem 3rem;padding:2.2rem 0;border-top:1px solid var(--line-dark);align-items:start}\n.step:last-child{border-bottom:1px solid var(--line-dark)}\n.step .n{font-family:var(--display);font-weight:600;font-size:2.4rem;color:var(--accent);line-height:1}\n.step p{color:rgba(255,255,255,.78);font-size:.95rem}\n.step .note{margin-top:.7rem;font-size:.8rem;color:rgba(255,255,255,.55)}\n.path-foot{display:flex;justify-content:space-between;align-items:center;gap:2rem;flex-wrap:wrap;margin-top:2.6rem}\n.path-foot .terms{font-size:.92rem;color:rgba(255,255,255,.78);max-width:46ch}\n.path-foot .terms b{color:#fff}\n@media(max-width:880px){.step{grid-template-columns:56px 1fr;grid-template-rows:auto auto}.step>div:last-child{grid-column:2}}\n\n\/* assess table *\/\n.assess{background:var(--paper-2)}\n.spec-table{border-top:1px solid var(--line)}\n.spec-row{display:grid;grid-template-columns:minmax(0,4fr) minmax(0,8fr);gap:1rem 3rem;padding:1.7rem 0;border-bottom:1px solid var(--line)}\n.spec-row .k{font-weight:600;color:var(--navy);font-size:.98rem}\n.spec-row .v{color:var(--slate);font-size:.95rem;max-width:68ch}\n@media(max-width:880px){.spec-row{grid-template-columns:1fr}}\n\n\/* ============ READINESS CHECK ============ *\/\n.ready{background:var(--navy-deep);color:#fff}\n.ready h2{color:#fff}\n.ready .sec-head .lede{color:rgba(255,255,255,.72)}\n.ready-grid{display:grid;grid-template-columns:minmax(0,4fr) minmax(0,8fr);gap:3rem 4.5rem;align-items:start}\n.ready-rail{border-left:1px solid var(--line-dark);padding-left:1.8rem}\n.ready-rail .rt{font-size:.72rem;font-weight:700;letter-spacing:.15em;text-transform:uppercase;color:rgba(255,255,255,.5);margin-bottom:1.3rem}\n.ready-rail ul{list-style:none;display:flex;flex-direction:column;gap:1.05rem}\n.ready-rail li{font-size:.9rem;color:rgba(255,255,255,.75);padding-left:1.3rem;position:relative}\n.ready-rail li::before{content:'';position:absolute;left:0;top:.52em;width:.45rem;height:1px;background:var(--accent)}\n.ready-rail li b{color:#fff;font-weight:600;display:block}\n.ready-rail .priv{margin-top:1.8rem;font-size:.78rem;color:rgba(255,255,255,.58);max-width:30ch}\n.quiz{background:rgba(255,255,255,.035);border:1px solid var(--line-dark);padding:clamp(1.5rem,3vw,2.6rem)}\n.q-meta{display:flex;justify-content:space-between;align-items:baseline;font-size:.76rem;letter-spacing:.13em;text-transform:uppercase;color:rgba(255,255,255,.55);margin-bottom:.6rem}\n.q-bar{height:2px;background:rgba(255,255,255,.12);margin-bottom:1.9rem}\n.q-bar i{display:block;height:2px;background:var(--accent);width:0;transition:width .4s cubic-bezier(.16,1,.3,1)}\n.quiz h3{font-size:clamp(1.25rem,2.2vw,1.6rem);color:#fff;margin-bottom:1.6rem;max-width:30ch}\n.q-opts{display:flex;flex-direction:column;gap:.7rem}\n.q-opt{display:block;width:100%;text-align:left;background:transparent;border:1px solid var(--line-dark);color:rgba(255,255,255,.88);font-family:var(--body);font-size:.95rem;padding:1rem 1.25rem;cursor:pointer;transition:border-color .2s,background .2s}\n.q-opt:hover{border-color:var(--accent);background:rgba(45,171,224,.07)}\n.q-opt:active{transform:scale(.99)}\n.q-opt .h{display:block;font-size:.78rem;color:rgba(255,255,255,.5);margin-top:.15rem}\n.q-back{margin-top:1.4rem;background:none;border:none;color:rgba(255,255,255,.5);font-family:var(--body);font-size:.8rem;cursor:pointer;padding:.3rem 0}\n.q-back:hover{color:#fff}\n\/* result *\/\n.res{display:none}\n.res.show{display:block}\n.res-grid{display:grid;grid-template-columns:auto minmax(0,1fr);gap:2.4rem;align-items:center}\n.ring{width:148px;height:148px;position:relative}\n.ring svg{transform:rotate(-90deg)}\n.ring .bg{stroke:rgba(255,255,255,.12)}\n.ring .fg{stroke:var(--accent);stroke-linecap:butt;transition:stroke-dashoffset 1.1s cubic-bezier(.16,1,.3,1)}\n.ring .val{position:absolute;inset:0;display:flex;flex-direction:column;align-items:center;justify-content:center;font-family:var(--display);font-weight:600;font-size:2.3rem;color:#fff;line-height:1}\n.ring .val small{font-family:var(--body);font-size:.66rem;letter-spacing:.12em;text-transform:uppercase;color:rgba(255,255,255,.55);margin-top:.3rem}\n.res-band{font-size:.74rem;font-weight:700;letter-spacing:.15em;text-transform:uppercase;color:var(--accent);margin-bottom:.5rem}\n.res h3{color:#fff;margin-bottom:.7rem}\n.res .rec{color:rgba(255,255,255,.78);font-size:.95rem;max-width:54ch;margin-bottom:1.5rem}\n.dims{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:1rem 2.5rem;margin:2.2rem 0 2.4rem;border-top:1px solid var(--line-dark);padding-top:1.8rem}\n.dim .dl{display:flex;justify-content:space-between;font-size:.78rem;letter-spacing:.06em;text-transform:uppercase;color:rgba(255,255,255,.6);margin-bottom:.45rem}\n.dim .dl b{color:#fff;font-weight:600;letter-spacing:0;text-transform:none}\n.dim .m{height:3px;background:rgba(255,255,255,.12)}\n.dim .m i{display:block;height:3px;background:var(--accent);width:0;transition:width .9s cubic-bezier(.16,1,.3,1)}\n.res-ctas{display:flex;gap:1rem;flex-wrap:wrap;align-items:center}\n.res-ctas .restart{background:none;border:none;color:rgba(255,255,255,.5);font-family:var(--body);font-size:.82rem;cursor:pointer}\n.res-ctas .restart:hover{color:#fff}\n@media(max-width:880px){.ready-grid{grid-template-columns:1fr}.ready-rail{border-left:none;padding-left:0;border-top:1px solid var(--line-dark);padding-top:1.5rem;order:2}.res-grid{grid-template-columns:1fr}.dims{grid-template-columns:1fr}}\n\n\/* tax analogy \/ two paths *\/\n.paths{background:var(--paper)}\n.split{display:grid;grid-template-columns:minmax(0,1fr) minmax(0,1fr);border-top:1px solid var(--line)}\n.split>div{padding:2.6rem 0;border-bottom:1px solid var(--line)}\n.split>div:first-child{padding-right:3.5rem;border-right:1px solid var(--line)}\n.split>div:last-child{padding-left:3.5rem}\n.split .role{font-size:.74rem;font-weight:700;letter-spacing:.15em;text-transform:uppercase;color:var(--slate);margin-bottom:.9rem}\n.split h3{margin-bottom:.8rem}\n.split p{color:var(--slate);font-size:.95rem}\n.split a.lnk{display:inline-block;margin-top:1.2rem;font-size:.9rem;font-weight:600;color:var(--navy);text-decoration:none;border-bottom:1px solid var(--accent);padding-bottom:2px}\n.split a.lnk:hover{color:var(--accent)}\n.coi{margin-top:2.4rem;padding:1.5rem 1.8rem;border:1px solid var(--line);background:var(--paper-2);font-size:.9rem;color:var(--slate);max-width:none}\n.coi b{color:var(--navy)}\n@media(max-width:880px){.split{grid-template-columns:1fr}.split>div:first-child{border-right:none;padding-right:0}.split>div:last-child{padding-left:0}}\n\n\/* timing *\/\n.timing{background:var(--paper-2)}\n.t-rows{border-top:1px solid var(--line)}\n.t-row{display:grid;grid-template-columns:64px minmax(0,4fr) minmax(0,7fr);gap:1.2rem 3rem;padding:2rem 0;border-bottom:1px solid var(--line);align-items:start}\n.t-row .n{font-family:var(--display);font-weight:600;font-size:1.5rem;color:var(--navy)}\n.t-row h3{font-size:1.1rem}\n.t-row p{color:var(--slate);font-size:.94rem}\n@media(max-width:880px){.t-row{grid-template-columns:48px 1fr}.t-row p{grid-column:2}}\n\n\/* why ASE *\/\n.why{background:var(--navy);color:#fff}\n.why h2{color:#fff}\n.why .sec-head .lede{color:rgba(255,255,255,.72)}\n.statband{display:grid;grid-template-columns:repeat(5,minmax(0,1fr));gap:0 3rem;border-top:1px solid var(--line-dark)}\n.statband .s{padding:2.4rem 0 .6rem}\n.statband .k{font-family:var(--display);font-weight:600;font-size:clamp(1.9rem,3vw,2.6rem);line-height:1.05}\n.statband .v{font-size:.84rem;color:rgba(255,255,255,.62);margin-top:.45rem;max-width:24ch}\n.why-low{display:grid;grid-template-columns:minmax(0,7fr) minmax(0,5fr);gap:3rem 5rem;margin-top:3.2rem;align-items:center}\n.why-low ul{list-style:none;display:flex;flex-direction:column;gap:1.1rem}\n.why-low li{padding-left:1.6rem;position:relative;font-size:.96rem;color:rgba(255,255,255,.82)}\n.why-low li::before{content:'';position:absolute;left:0;top:.6em;width:.6rem;height:1px;background:var(--accent)}\n.why-low li b{color:#fff}\n.seals{display:flex;gap:2.5rem;align-items:center;justify-content:flex-end;flex-wrap:wrap}\n.seals img{height:88px;width:auto}\n.seals img.wide{height:56px}\n@media(max-width:980px){.statband{grid-template-columns:repeat(2,1fr)}.why-low{grid-template-columns:1fr}.seals{justify-content:flex-start}}\n\n\/* leadership *\/\n.team{background:var(--paper)}\n.team-grid{border-top:1px solid var(--line)}\n.tm{display:grid;grid-template-columns:64px minmax(0,4fr) minmax(0,6fr) minmax(0,2fr);gap:1rem 2.5rem;padding:1.6rem 0;border-bottom:1px solid var(--line);align-items:center}\n.tm .av{width:56px;height:56px;border-radius:50%;background:var(--navy);color:#fff;display:flex;align-items:center;justify-content:center;font-family:var(--display);font-weight:600;font-size:1.05rem;overflow:hidden;flex-shrink:0}\n.tm .av img{width:100%;height:100%;object-fit:cover;filter:contrast(1.02)}\n.tm .av img{ filter: grayscale(100%); }\n.tm .nm{font-weight:600;color:var(--navy);font-size:1rem}\n.tm .rl{font-size:.82rem;color:var(--slate)}\n.tm .bio{font-size:.88rem;color:var(--slate)}\n.tm .cred{font-size:.74rem;font-weight:700;letter-spacing:.1em;text-transform:uppercase;color:var(--navy);text-align:right}\n.team-note{margin-top:1.6rem;font-size:.85rem;color:var(--slate)}\n@media(max-width:880px){.tm{grid-template-columns:52px 1fr;row-gap:.4rem}.tm .bio,.tm .cred{grid-column:2;text-align:left}}\n\n\/* FAQ *\/\n.faq{background:var(--paper-2)}\n.faq-list{border-top:1px solid var(--line)}\n.faq-item{border-bottom:1px solid var(--line)}\n.faq-item summary{display:flex;justify-content:space-between;align-items:baseline;gap:2rem;cursor:pointer;padding:1.5rem 0;font-weight:600;color:var(--navy);font-size:1.02rem;list-style:none}\n.faq-item summary::-webkit-details-marker{display:none}\n.faq-item summary::after{content:'+';font-family:var(--display);font-size:1.4rem;color:var(--navy);flex-shrink:0;line-height:1}\n.faq-item[open] summary::after{content:'\u2013'}\n.faq-item .a{padding:0 0 1.6rem;color:var(--slate);font-size:.95rem;max-width:68ch}\n\n\/* ============ FORM ============ *\/\n.req{background:var(--navy-ink);color:#fff}\n.req h2{color:#fff}\n.req .sec-head .lede{color:rgba(255,255,255,.72)}\n.form-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:1.5rem 2.2rem}\n.fg{display:flex;flex-direction:column;gap:.45rem}\n.fg.full{grid-column:1\/-1}\n.fg label{font-size:.78rem;font-weight:600;letter-spacing:.08em;text-transform:uppercase;color:rgba(255,255,255,.65)}\n.fg input,.fg select{font-family:var(--body);font-size:.95rem;color:#fff;background:rgba(255,255,255,.05);border:1px solid var(--line-dark);padding:.85rem 1rem;width:100%;transition:border-color .2s}\n.fg select{appearance:none;background-image:url(\"data:image\/svg+xml,%3Csvg xmlns='http:\/\/www.w3.org\/2000\/svg' width='10' height='6'%3E%3Cpath d='M0 0l5 6 5-6z' fill='%232DABE0'\/%3E%3C\/svg%3E\");background-repeat:no-repeat;background-position:right 1rem center}\n.fg select option{color:var(--ink);background:#fff}\n.fg input::placeholder{color:rgba(255,255,255,.35)}\n.fg input:focus,.fg select:focus{border-color:var(--accent);outline:none}\n.fg .err{display:none;font-size:.78rem;color:#F2A4B0}\n.fg.bad input,.fg.bad select{border-color:#C84B62}\n.fg.bad .err{display:block}\n.form-foot{grid-column:1\/-1;display:flex;justify-content:space-between;align-items:center;gap:2rem;flex-wrap:wrap;margin-top:1rem}\n.form-foot .alt{font-size:.85rem;color:rgba(255,255,255,.6)}\n.form-foot .alt a{color:#fff;text-decoration:none;font-weight:600;border-bottom:1px solid var(--accent)}\n.form-msg{display:none;grid-column:1\/-1;padding:1.6rem 1.9rem;border:1px solid var(--accent);background:rgba(45,171,224,.08);font-size:.97rem;color:#fff}\n.form-msg.show{display:block}\n.form-msg.fail{border-color:#C84B62;background:rgba(200,75,98,.1)}\n@media(max-width:760px){.form-grid{grid-template-columns:1fr}}\n\n\/* footer *\/\nfooter{background:var(--navy-ink);color:rgba(255,255,255,.6);border-top:1px solid var(--line-dark)}\n.foot{display:flex;justify-content:space-between;align-items:flex-start;gap:3rem;flex-wrap:wrap;padding:3.2rem 0 2.6rem}\n.foot img{height:46px;width:auto}\n.foot .addr{font-size:.85rem;line-height:1.8}\n.foot .addr a{color:#fff;text-decoration:none}\n.foot .addr a:hover{text-decoration:underline}\n.foot-links{display:flex;flex-direction:column;gap:.6rem;font-size:.85rem}\n.foot-links a{color:rgba(255,255,255,.7);text-decoration:none}\n.foot-links a:hover{color:#fff}\n.foot-base{border-top:1px solid var(--line-dark);padding:1.2rem 0 1.4rem;font-size:.76rem;color:rgba(255,255,255,.56);display:flex;justify-content:space-between;gap:2rem;flex-wrap:wrap}\n<\/style>\n<\/head>\n<body>\n<a class=\"skip\" href=\"#main\">Skip to content<\/a>\n<!-- \n<header>\n  <div class=\"wrap nav\">\n    <a class=\"logo\" href=\"https:\/\/augustschell.com\/\" aria-label=\"August Schell home\">\n      <img loading=\"lazy\" decoding=\"async\" src=\"assets\/2023-ase-logo-color.svg\" alt=\"August Schell\" width=\"170\" height=\"34\">\n    <\/a>\n    <nav aria-label=\"Page\">\n      <ul class=\"nav-links\" id=\"navLinks\">\n        <li><a href=\"#path\">The Path<\/a><\/li>\n        <li><a href=\"#readiness\">Readiness Check<\/a><\/li>\n        <li><a href=\"#why\">Why August Schell<\/a><\/li>\n        <li><a href=\"#faq\">FAQ<\/a><\/li>\n        <li><a class=\"btn btn-navy\" href=\"#request\">Request an Assessment<\/a><\/li>\n      <\/ul>\n    <\/nav>\n    <button class=\"nav-toggle\" id=\"navToggle\" aria-expanded=\"false\" aria-controls=\"navLinks\">Menu<\/button>\n  <\/div>\n<\/header>\n-->\n<main id=\"main\">\n\n<!-- HERO -->\n<section class=\"hero dark\" aria-label=\"Introduction\" style=\"padding:0\">\n  <div class=\"hero-img\" role=\"img\" aria-label=\"Secure federal data facility rendered in deep navy\"><\/div>\n  <div class=\"wrap hero-inner\">\n    <div>\n      <p class=\"eyebrow rv\">Cyber AB Authorized C3PAO \u00b7 DIBCAC Assessed<\/p>\n      <h1 class=\"rv\" style=\"--i:1\">Authorized CMMC Level&nbsp;2 C3PAO assessments<\/h1>\n      <p class=\"sub rv\" style=\"--i:2\">August Schell is an authorized CMMC Third-Party Assessment Organization. Our all-W-2, in-house Lead CCAs run the formal CMMC Level&nbsp;2 certification assessment against the 110 controls of NIST SP 800-171 \u2014 so your certification holds up where it counts.<\/p>\n      <div class=\"ctas rv\" style=\"--i:3\">\n        <a class=\"btn btn-primary\" href=\"#request\">Request a C3PAO assessment<\/a>\n        <a class=\"btn btn-ghost\" href=\"#readiness\">Check your readiness<\/a>\n        <span class=\"tel\">or call <a href=\"tel:+13018389470\" class=\"num\">(301) 838-9470<\/a><\/span>\n      <\/div>\n    <\/div>\n    <a class=\"hero-tease rv\" style=\"--i:4\" href=\"#readiness\" aria-label=\"Start the readiness check \u2014 six questions, two minutes\">\n      <p class=\"ht-eyebrow\">Readiness check<\/p>\n      <p class=\"ht-q\">Are you ready to be assessed?<\/p>\n      <p class=\"ht-s\">Six questions. Two minutes. A score and a straight answer.<\/p>\n      <div class=\"ht-dims\" aria-hidden=\"true\">\n        <div class=\"ht-d\"><span>Scope<\/span><i style=\"--w:78%\"><\/i><\/div>\n        <div class=\"ht-d\"><span>SSP<\/span><i style=\"--w:52%\"><\/i><\/div>\n        <div class=\"ht-d\"><span>Gaps<\/span><i style=\"--w:34%\"><\/i><\/div>\n      <\/div>\n      <span class=\"ht-go\">Start the check &rarr;<\/span>\n    <\/a>\n  <\/div>\n  <div class=\"hero-cred\">\n    <div class=\"wrap row\">\n      <div class=\"c\"><div class=\"k num\">30+ years<\/div><div class=\"v\">Federal &amp; defense experience<\/div><\/div>\n      <div class=\"c\"><div class=\"k num\" aria-hidden=\"true\" style=\"line-height:1;\"><svg width=\"46\" height=\"30\" viewBox=\"0 0 38 24\" role=\"img\" aria-label=\"United States flag\" style=\"border:1px solid #1B3663;border-radius:2px;vertical-align:middle;\"><rect width=\"38\" height=\"24\" fill=\"#FFFFFF\"\/><g fill=\"#B22234\"><rect width=\"38\" height=\"1.846\" y=\"0\"\/><rect width=\"38\" height=\"1.846\" y=\"3.69\"\/><rect width=\"38\" height=\"1.846\" y=\"7.38\"\/><rect width=\"38\" height=\"1.846\" y=\"11.08\"\/><rect width=\"38\" height=\"1.846\" y=\"14.77\"\/><rect width=\"38\" height=\"1.846\" y=\"18.46\"\/><rect width=\"38\" height=\"1.846\" y=\"22.15\"\/><\/g><rect width=\"15.2\" height=\"12.92\" fill=\"#1B3663\"\/><\/svg><\/div><div class=\"v\">U.S. based &amp; U.S. owned<\/div><\/div>\n      <div class=\"c\"><div class=\"k\">All W-2<\/div><div class=\"v\">In-house Lead CCAs<\/div><\/div>\n      <div class=\"c\"><div class=\"k num\">1 of 9<\/div><div class=\"v\">Cyber AB firms holding both RPO + C3PAO with more than 10 years in business<\/div><\/div>\n      <div class=\"c\"><div class=\"k\">ISO 9001<\/div><div class=\"v\">Certified quality system<\/div><\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- CMMC UPDATE BANNER -->\n<div style=\"background:var(--paper-2);border-top:1px solid var(--line);border-bottom:1px solid var(--line)\">\n  <div class=\"wrap\" style=\"padding:1.1rem clamp(1.25rem,4vw,3rem)\">\n    <p style=\"font-size:.88rem;color:var(--slate);max-width:none\">\n      <b style=\"color:var(--navy);font-weight:700;letter-spacing:.04em\">CMMC UPDATE \u00b7 JULY 2026<\/b> \u2014\n      On July 13, DoD suspended CMMC Phase 2 (third-party certification assessments) pending a 60-day program review.\n      Phase 1 remains in effect: if you handle CUI, self-assessment against NIST SP 800-171 Rev. 2 is still required.\n    <\/p>\n  <\/div>\n<\/div>\n<!-- FILMSTRIP -->\n<div class=\"filmstrip\" role=\"img\" aria-label=\"August Schell secure infrastructure\">\n  <div class=\"tag\"><div class=\"wrap\">\n    <span>August Schell \u00b7 Rockville, Maryland<\/span>\n    <span>Serving the defense industrial base<\/span>\n  <\/div><\/div>\n<\/div>\n\n<!-- MANDATE -->\n<section class=\"mandate\" id=\"mandate\">\n  <div class=\"wrap\">\n    <div class=\"sec-head\">\n      <div>\n        <p class=\"eyebrow rv\"><span class=\"idx num\">01<\/span>Where things stand<\/p>\n        <h2 class=\"rv\" style=\"--i:1\">Phase 2 is suspended. Your obligation isn&#8217;t.<\/h2>\n      <\/div>\n      <p class=\"lede rv\" style=\"--i:2\">On July 13, 2026, DoD suspended CMMC Phase 2 \u2014 the requirement for third-party certification assessments \u2014 and opened a 60-day review of the program. What moved is the enforcement date. What didn&#8217;t: CMMC Level&nbsp;2 remains the Department of Defense&#8217;s bar for any contractor that stores or processes Controlled Unclassified Information, and if you handle CUI you&#8217;re still required to self-assess against all 110 controls in NIST SP 800-171 Rev.&nbsp;2 and keep your score current in SPRS.<\/p>\n    <\/div>\n    <div class=\"mandate-grid\">\n      <p class=\"big rv\">Behind every contract requirement is the actual mission: protecting the warfighter. CMMC exists because adversaries target the defense supply chain \u2014 and your certification is the proof your part of it is defended.<\/p>\n      <div class=\"mandate-facts\">\n        <div class=\"f rv\" style=\"--i:1\"><div class=\"k num\">110<\/div><div class=\"v\">NIST SP 800-171 controls assessed at CMMC Level&nbsp;2<\/div><\/div>\n        <div class=\"f rv\" style=\"--i:2\"><div class=\"k num\">3 years<\/div><div class=\"v\">Certification validity, with an annual affirmation in SPRS<\/div><\/div>\n        <div class=\"f rv\" style=\"--i:3\"><div class=\"k\">Today<\/div><div class=\"v\">A prime can require your CMMC certificate as a condition of staying in their supply chain \u2014 right now<\/div><\/div>\n      <\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- PATH -->\n<section class=\"path dark\" id=\"path\">\n  <div class=\"wrap\">\n    <div class=\"sec-head\">\n      <div>\n        <p class=\"eyebrow rv\"><span class=\"idx num\">02<\/span>The path<\/p>\n        <h2 class=\"rv\" style=\"--i:1\">Mock, remediate, certify<\/h2>\n      <\/div>\n      <p class=\"lede rv\" style=\"--i:2\">Most organizations come to us for the two-step path, and it&#8217;s the one we recommend: a full dress rehearsal, gap remediation with your RPO, then the assessment that counts.<\/p>\n    <\/div>\n    <div class=\"steps\">\n      <div class=\"step rv\">\n        <div class=\"n num\">1<\/div>\n        <div><h3>Mock assessment<\/h3><p class=\"note\">Your insurance policy<\/p><\/div>\n        <div><p>A full dry run against all 110 NIST SP 800-171 controls. You get a clear Met \/ Not Met report with the evidence behind each result \u2014 so you know exactly where you stand before the assessment that counts.<\/p><\/div>\n      <\/div>\n      <div class=\"step rv\" style=\"--i:1\">\n        <div class=\"n num\">2<\/div>\n        <div><h3>Remediate with your RPO<\/h3><p class=\"note\">Independence is the point<\/p><\/div>\n        <div><p>By Cyber AB rules, the C3PAO that assesses you cannot tell you how to fix gaps \u2014 that independence is what makes your certificate credible. You close gaps with your RPO: ours, or your own.<\/p><\/div>\n      <\/div>\n      <div class=\"step rv\" style=\"--i:2\">\n        <div class=\"n num\">3<\/div>\n        <div><h3>Certification assessment<\/h3><p class=\"note\">The one that counts<\/p><\/div>\n        <div><p>The formal CMMC Level&nbsp;2 assessment \u2014 faster, because you reuse the evidence from your mock. Pass, and your certification is recorded in SPRS, valid for three years with an annual affirmation.<\/p><\/div>\n      <\/div>\n    <\/div>\n    <div class=\"path-foot rv\">\n      <p class=\"terms\"><b>Payment is 50% on execution, 50% on report delivery.<\/b> Final scope depends on environment size and complexity; your starting-at pricing arrives with our first reply.<\/p>\n      <a class=\"btn btn-primary\" href=\"#request\">Request a C3PAO assessment<\/a>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- WHAT WE ASSESS -->\n<section class=\"assess\" id=\"assess\">\n  <div class=\"wrap\">\n    <div class=\"sec-head\">\n      <div>\n        <p class=\"eyebrow rv\"><span class=\"idx num\">03<\/span>The assessment<\/p>\n        <h2 class=\"rv\" style=\"--i:1\">What we assess, and how<\/h2>\n      <\/div>\n      <p class=\"lede rv\" style=\"--i:2\">We evaluate all 110 NIST SP 800-171 controls \u2014 documentation, people, and technology \u2014 backed by objective evidence.<\/p>\n    <\/div>\n    <div class=\"spec-table\">\n      <div class=\"spec-row rv\"><div class=\"k\">Documentation<\/div><div class=\"v\">Your System Security Plan, policies, and procedures \u2014 examined for completeness and for whether they match actual practice. An incomplete SSP is the most common reason organizations fail.<\/div><\/div>\n      <div class=\"spec-row rv\" style=\"--i:1\"><div class=\"k\">People<\/div><div class=\"v\">Interviews with your staff to confirm controls are operationalized \u2014 not just written down.<\/div><\/div>\n      <div class=\"spec-row rv\" style=\"--i:2\"><div class=\"k\">Technology<\/div><div class=\"v\">Technical controls tested for consistent implementation, backed by objective evidence.<\/div><\/div>\n      <div class=\"spec-row rv\" style=\"--i:3\"><div class=\"k\">Timeline<\/div><div class=\"v\">Plan for at least three months end-to-end. Our assessment work runs roughly 4\u20138 weeks \u2014 intake, review, interviews, testing \u2014 and the government and Cyber AB review that follows adds time on top.<\/div><\/div>\n      <div class=\"spec-row rv\" style=\"--i:4\"><div class=\"k\">Remote or on-site<\/div><div class=\"v\">All-cloud environments can be assessed remotely. If you store or process CUI on-premises, that location comes into scope and typically requires an on-site visit; travel is billed separately at federal per-diem rates.<\/div><\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- READINESS CHECK -->\n<section class=\"ready dark\" id=\"readiness\">\n  <div class=\"wrap\">\n    <div class=\"sec-head\">\n      <div>\n        <p class=\"eyebrow rv\"><span class=\"idx num\">04<\/span>Readiness check<\/p>\n        <h2 class=\"rv\" style=\"--i:1\">Are you ready to be assessed?<\/h2>\n      <\/div>\n      <p class=\"lede rv\" style=\"--i:2\">Six questions, two minutes. You&#8217;ll get a readiness score and a straight answer on whether to book the assessment, run a mock first, or start with advisory.<\/p>\n    <\/div>\n    <div class=\"ready-grid\">\n      <aside class=\"ready-rail rv\" aria-label=\"What this checks\">\n        <p class=\"rt\">What this checks<\/p>\n        <ul>\n          <li><b>Scope<\/b> CUI boundary and system scope definition<\/li>\n          <li><b>SSP<\/b> System Security Plan status<\/li>\n          <li><b>Gap analysis<\/b> Position against the 110 controls<\/li>\n          <li><b>POA&amp;M \/ SPRS<\/b> Remediation plan and submitted score<\/li>\n        <\/ul>\n        <p class=\"priv\">Nothing is recorded or sent until you submit the request form.<\/p>\n      <\/aside>\n      <div class=\"quiz rv\" style=\"--i:1\" id=\"quiz\">\n        <!-- question view -->\n        <div id=\"qView\">\n          <div class=\"q-meta\"><span id=\"qCount\">Question 1 of 6<\/span><span id=\"qKind\">Routing<\/span><\/div>\n          <div class=\"q-bar\"><i id=\"qBar\"><\/i><\/div>\n          <h3 id=\"qText\">Does your organization store or process CUI?<\/h3>\n          <div class=\"q-opts\" id=\"qOpts\" role=\"group\" aria-labelledby=\"qText\"><\/div>\n          <button class=\"q-back\" id=\"qBack\" hidden>&larr; Previous question<\/button>\n        <\/div>\n        <!-- result view -->\n        <div class=\"res\" id=\"resView\" aria-live=\"polite\">\n          <div class=\"res-grid\">\n            <div class=\"ring\" id=\"ringWrap\">\n              <svg width=\"148\" height=\"148\" viewBox=\"0 0 148 148\" aria-hidden=\"true\">\n                <circle class=\"bg\" cx=\"74\" cy=\"74\" r=\"66\" fill=\"none\" stroke-width=\"5\"\/>\n                <circle class=\"fg\" id=\"ringFg\" cx=\"74\" cy=\"74\" r=\"66\" fill=\"none\" stroke-width=\"5\" stroke-dasharray=\"414.7\" stroke-dashoffset=\"414.7\"\/>\n              <\/svg>\n              <div class=\"val\"><span class=\"num\" id=\"ringVal\">0<\/span><small>Readiness<\/small><\/div>\n            <\/div>\n            <div>\n              <p class=\"res-band\" id=\"resBand\">Assessment-ready<\/p>\n              <h3 id=\"resTitle\">Book the assessment.<\/h3>\n              <p class=\"rec\" id=\"resRec\"><\/p>\n            <\/div>\n          <\/div>\n          <div class=\"dims\" id=\"dims\"><\/div>\n          <div class=\"res-ctas\">\n            <a class=\"btn btn-primary\" id=\"resCta\" href=\"#request\">Request a C3PAO assessment<\/a>\n            <button class=\"restart\" id=\"qRestart\">Start over<\/button>\n          <\/div>\n        <\/div>\n      <\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- TWO PATHS \/ TAX ANALOGY -->\n<section class=\"paths\" id=\"paths\">\n  <div class=\"wrap\">\n    <div class=\"sec-head\">\n      <div>\n        <p class=\"eyebrow rv\"><span class=\"idx num\">05<\/span>Prepare or certify<\/p>\n        <h2 class=\"rv\" style=\"--i:1\">Two roles, kept independent.<\/h2>\n      <\/div>\n      <p class=\"lede rv\" style=\"--i:2\">Think of it like your taxes: an RPO is the accountant who prepares your return \u2014 and can sit beside you in the audit. A C3PAO files it. Cyber AB rules keep the two independent.<\/p>\n    <\/div>\n    <div class=\"split\">\n      <div class=\"rv\">\n        <p class=\"role\">If you need preparation<\/p>\n        <h3>RPO \u2014 readiness &amp; advisory<\/h3>\n        <p>Scoping, readiness assessment, gap analysis, NIST SP 800-171 remediation, and managed CUI enclaves. We get you audit-ready, and we can sit with you through the assessment itself.<\/p>\n        <a class=\"lnk\" href=\"\/cmmc\/rpo-advisory\/\">CMMC RPO &amp; Readiness Advisory &rarr;<\/a>\n      <\/div>\n      <div class=\"rv\" style=\"--i:1\">\n        <p class=\"role\">If you&#8217;re ready to certify<\/p>\n        <h3>C3PAO \u2014 certification assessment<\/h3>\n        <p>The formal CMMC Level&nbsp;2 assessment, performed by our all-W-2, in-house Lead CCAs. This page. This is the assessment that goes on record in SPRS.<\/p>\n        <a class=\"lnk\" href=\"#request\">Request a C3PAO assessment &rarr;<\/a>\n      <\/div>\n    <\/div>\n    <p class=\"coi rv\"><b>Conflict of interest, handled honestly.<\/b> If August Schell provided you RPO, advisory, or remediation services in the last three years, Cyber AB rules prevent us from performing your certification assessment \u2014 we&#8217;ll coordinate an independent C3PAO. Need preparation first? Start with <a href=\"\/cmmc\/rpo-advisory\/\" style=\"color:var(--navy);font-weight:600\">RPO &amp; Readiness Advisory<\/a>.<\/p>\n  <\/div>\n<\/section>\n\n<!-- TIMING -->\n<section class=\"timing\" id=\"timing\">\n  <div class=\"wrap\">\n    <div class=\"sec-head\">\n      <div>\n        <p class=\"eyebrow rv\"><span class=\"idx num\">06<\/span>Why timing matters<\/p>\n        <h2 class=\"rv\" style=\"--i:1\">The calendar is not on your side<\/h2>\n      <\/div>\n      <p class=\"lede rv\" style=\"--i:2\">There is no single grace-period deadline that protects you \u2014 the pressure arrives contract by contract.<\/p>\n    <\/div>\n    <div class=\"t-rows\">\n      <div class=\"t-row rv\"><div class=\"n num\">i<\/div><h3>A prime can require it today<\/h3><p>Prime contractors can require your CMMC certificate as a condition of staying in their supply chain \u2014 &#8220;produce it or you&#8217;re out.&#8221; That demand can land before any government deadline does.<\/p><\/div>\n      <div class=\"t-row rv\" style=\"--i:1\"><div class=\"n num\">ii<\/div><h3>Assessor capacity is the bottleneck<\/h3><p>DoD cited assessor capacity as a core reason for pausing Phase 2 \u2014 roughly 100 authorized assessors for more than 100,000 businesses. That math doesn&#8217;t improve while everyone waits. A limited bench of authorized C3PAOs serves the entire defense industrial base, and we hold a limited number of assessment slots each month. Organizations that get ready during the pause get assessed first when it restarts; organizations that wait join a queue.<\/p><\/div>\n      <div class=\"t-row rv\" style=\"--i:2\"><div class=\"n num\">iii<\/div><h3>The process takes months, not weeks<\/h3><p>Between assessment work and the government and Cyber AB review that follows, plan for at least three months end-to-end \u2014 longer if a mock surfaces gaps to remediate.<\/p><\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- WHY ASE -->\n<section class=\"why dark\" id=\"why\">\n  <div class=\"wrap\">\n    <div class=\"sec-head\">\n      <div>\n        <p class=\"eyebrow rv\"><span class=\"idx num\">07<\/span>Why August Schell<\/p>\n        <h2 class=\"rv\" style=\"--i:1\">The team that assesses you works here<\/h2>\n      <\/div>\n      <p class=\"lede rv\" style=\"--i:2\">No 1099 subcontractors on your assessment. The Lead CCAs who evaluate your environment are August Schell employees \u2014 and they&#8217;ll still be here for your three-year recertification.<\/p>\n    <\/div>\n    <div class=\"statband\">\n      <div class=\"s rv\"><div class=\"k num\">30+<\/div><div class=\"v\">Years serving federal and defense missions<\/div><\/div>\n      <div class=\"s rv\" style=\"--i:1\"><div class=\"k num\" aria-hidden=\"true\" style=\"line-height:1;\"><svg width=\"46\" height=\"30\" viewBox=\"0 0 38 24\" role=\"img\" aria-label=\"United States flag\" style=\"border:1px solid #1B3663;border-radius:2px;vertical-align:middle;\"><rect width=\"38\" height=\"24\" fill=\"#FFFFFF\"\/><g fill=\"#B22234\"><rect width=\"38\" height=\"1.846\" y=\"0\"\/><rect width=\"38\" height=\"1.846\" y=\"3.69\"\/><rect width=\"38\" height=\"1.846\" y=\"7.38\"\/><rect width=\"38\" height=\"1.846\" y=\"11.08\"\/><rect width=\"38\" height=\"1.846\" y=\"14.77\"\/><rect width=\"38\" height=\"1.846\" y=\"18.46\"\/><rect width=\"38\" height=\"1.846\" y=\"22.15\"\/><\/g><rect width=\"15.2\" height=\"12.92\" fill=\"#1B3663\"\/><\/svg><\/div><div class=\"v\">U.S. based &amp; U.S. owned<\/div><\/div>\n      <div class=\"s rv\" style=\"--i:2\"><div class=\"k num\">1 of 9<\/div><div class=\"v\">Cyber AB firms holding both RPO and C3PAO with 10+ years in business<\/div><\/div>\n      <div class=\"s rv\" style=\"--i:3\"><div class=\"k\">All W-2<\/div><div class=\"v\">In-house Lead CCAs on every certification assessment<\/div><\/div>\n      <div class=\"s rv\" style=\"--i:4\"><div class=\"k num\">50\/50<\/div><div class=\"v\">Payment terms \u2014 half on execution, half on report delivery<\/div><\/div>\n    <\/div>\n    <div class=\"why-low\">\n      <ul>\n        <li class=\"rv\"><b>Authorized C3PAO<\/b> \u2014 authorized by the Cyber AB following a DIBCAC assessment.<\/li>\n        <li class=\"rv\" style=\"--i:1\"><b>Registered RPO<\/b> \u2014 the same firm can prepare you or certify you (never both), with the conflict-of-interest line drawn exactly where the Cyber AB draws it.<\/li>\n        <li class=\"rv\" style=\"--i:2\"><b>ISO 9001 certified<\/b> \u2014 our assessment practice runs on an audited quality management system.<\/li>\n        <li class=\"rv\" style=\"--i:3\"><b>Rockville, Maryland<\/b> \u2014 1700 Rockville Pike, Suite 405, in the heart of the federal corridor.<\/li>\n      <\/ul>\n      <div class=\"seals rv\" style=\"--i:2\">\n        <img decoding=\"async\" src=\"https:\/\/augustschell.com\/wp-content\/uploads\/2026\/07\/seal-c3pao.png\" alt=\"Cyber AB Authorized C3PAO seal\">\n        <img decoding=\"async\" class=\"wide\" src=\"https:\/\/augustschell.com\/wp-content\/uploads\/2026\/07\/seal-iso9001-white.png\" alt=\"PRI Registrar ISO 9001 certified seal\">\n      <\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- LEADERSHIP -->\n<section class=\"team\" id=\"team\">\n  <div class=\"wrap\">\n    <div class=\"sec-head\">\n      <div>\n        <p class=\"eyebrow rv\"><span class=\"idx num\">08<\/span>The bench<\/p>\n        <h2 class=\"rv\" style=\"--i:1\">Assessment leadership<\/h2>\n      <\/div>\n      <p class=\"lede rv\" style=\"--i:2\">A C3PAO is required to field a minimum of three CCAs, including two leads. The majority of our assessment team are Lead CCAs \u2014 high-credential assessors who have spent careers inside federal security programs.<\/p>\n    <\/div>\n    <div class=\"team-grid\">\n      <div class=\"tm rv\"><div class=\"av\"><img decoding=\"async\" src=\"https:\/\/augustschell.com\/wp-content\/uploads\/2026\/07\/team-judy.webp\" alt=\"Tim Judy\"><\/div><div><div class=\"nm\">Tim Judy<\/div><div class=\"rl\">Chief Information Security Officer<\/div><\/div><div class=\"bio\">Leads the assessment practice and reviews every public claim this firm makes. 20+ years in DoD cybersecurity.<\/div><div class=\"cred\">Lead CCA \u00b7 CISSP<\/div><\/div>\n      <div class=\"tm rv\" style=\"--i:1\"><div class=\"av\"><img decoding=\"async\" src=\"https:\/\/augustschell.com\/wp-content\/uploads\/2026\/07\/team-baca.jpg\" alt=\"Mike Baca\"><\/div><div><div class=\"nm\">Mike Baca<\/div><div class=\"rl\">Chief Information Officer<\/div><\/div><div class=\"bio\">Former NSA cybersecurity instructor; leads CMMC program implementation.<\/div><div class=\"cred\">Lead CCA \u00b7 CISSP-ISSEP<\/div><\/div>\n      <div class=\"tm rv\" style=\"--i:2\"><div class=\"av\"><img decoding=\"async\" src=\"https:\/\/augustschell.com\/wp-content\/uploads\/2026\/07\/team-cook.webp\" alt=\"Freddy Cook\"><\/div><div><div class=\"nm\">Freddy Cook<\/div><div class=\"rl\">Director, Risk Management Programs<\/div><\/div><div class=\"bio\">Former Endpoint Security Branch Chief at DISA \u2014 he has stood on the government side of the programs CMMC defends.<\/div><div class=\"cred\">Lead CCA \u00b7 CISSP<\/div><\/div>\n      <div class=\"tm rv\" style=\"--i:3\"><div class=\"av\"><img decoding=\"async\" src=\"https:\/\/augustschell.com\/wp-content\/uploads\/2026\/07\/team-simmons.jpg\" alt=\"George Simmons\"><\/div><div><div class=\"nm\">George Simmons<\/div><div class=\"rl\">Cloud Security &amp; Authorization<\/div><\/div><div class=\"bio\">Former DoD technical lead to the FedRAMP Joint Authorization Board; led DISA&#8217;s cloud authorization program across IL4\u2013IL6.<\/div><div class=\"cred\">CCA (Lead CCA pending) \u00b7 CISSP-ISSEP<\/div><\/div>\n      <div class=\"tm rv\" style=\"--i:4\"><div class=\"av\"><img decoding=\"async\" src=\"https:\/\/augustschell.com\/wp-content\/uploads\/2026\/07\/team-booker.webp\" alt=\"Alonzo Booker\"><\/div><div><div class=\"nm\">Alonzo &#8220;Cory&#8221; Booker<\/div><div class=\"rl\">Director, Managed Services<\/div><\/div><div class=\"bio\">Runs assessment delivery end to end, from scoping call to final report.<\/div><div class=\"cred\">CCP<\/div><\/div>\n      <div class=\"tm rv\" style=\"--i:5\"><div class=\"av\"><img decoding=\"async\" src=\"https:\/\/augustschell.com\/wp-content\/uploads\/2026\/07\/team-opoku.jpg\" alt=\"Rica Opoku\"><\/div><div><div class=\"nm\">Rica Opoku<\/div><div class=\"rl\">ISSO &amp; Certified CMMC Assessor<\/div><\/div><div class=\"bio\">Named ISSO over August Schell&#8217;s Azure VDI CUI enclave and a Certified CMMC Assessor. Instrumental in ASE&#8217;s January 2026 DIBCAC C3PAO Level 2 certification \u2014 owned SSP integrity, evidence packaging, and control validation across all 110 NIST SP 800-171 Rev. 2 requirements.<\/div><div class=\"cred\">CCA \u00b7 CCP \u00b7 RP \u00b7 Security+ \u00b7 CISA &amp; CISSP (in progress)<\/div><\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- FAQ -->\n<section class=\"faq\" id=\"faq\">\n  <div class=\"wrap\">\n    <div class=\"sec-head\">\n      <div>\n        <p class=\"eyebrow rv\"><span class=\"idx num\">09<\/span>FAQ<\/p>\n        <h2 class=\"rv\" style=\"--i:1\">Common questions<\/h2>\n      <\/div>\n    <\/div>\n    <div class=\"faq-list\">\n      <details class=\"faq-item rv\"><summary>What is a C3PAO?<\/summary><p class=\"a\">A CMMC Third-Party Assessment Organization authorized by the Cyber AB to perform formal CMMC Level 2 certification assessments. August Schell is an authorized C3PAO \u2014 authorized by the Cyber AB following a DIBCAC assessment.<\/p><\/details>\n      <details class=\"faq-item rv\" style=\"--i:1\"><summary>What&#8217;s a CMMC mock assessment?<\/summary><p class=\"a\">A full dry run against all 110 NIST SP 800-171 controls that produces a Met \/ Not Met report with evidence \u2014 so you find and fix gaps before the certification assessment. It&#8217;s our most-requested service.<\/p><\/details>\n      <details class=\"faq-item rv\" style=\"--i:2\"><summary>Why can&#8217;t my C3PAO also fix my gaps?<\/summary><p class=\"a\">Independence. The firm that certifies you can&#8217;t have remediated the environment it&#8217;s grading \u2014 that&#8217;s a Cyber AB conflict-of-interest rule. Your RPO handles remediation.<\/p><\/details>\n      <details class=\"faq-item rv\" style=\"--i:3\"><summary>How long does it take?<\/summary><p class=\"a\">Plan for at least three months: roughly 4\u20138 weeks of assessment work plus government and Cyber AB review.<\/p><\/details>\n      <details class=\"faq-item rv\" style=\"--i:4\"><summary>How long is certification valid?<\/summary><p class=\"a\">Three years, with an annual affirmation recorded in SPRS.<\/p><\/details>\n      <details class=\"faq-item rv\" style=\"--i:5\"><summary>What&#8217;s the most common reason organizations fail?<\/summary><p class=\"a\">Showing up without a complete SSP, poorly defined scope, or policies that don&#8217;t match actual practice.<\/p><\/details>\n      <details class=\"faq-item rv\" style=\"--i:6\"><summary>Do you work with smaller businesses?<\/summary><p class=\"a\">Yes. Most defense suppliers facing CMMC Level 2 are small and mid-size businesses, and the assessment scopes to your environment and size \u2014 you don&#8217;t pay for scope you don&#8217;t have.<\/p><\/details>\n      <details class=\"faq-item rv\" style=\"--i:7\"><summary>How soon can you start?<\/summary><p class=\"a\">We take a limited number of assessments each month and the calendar books ahead. Tell us your target date and we&#8217;ll tell you what&#8217;s realistic \u2014 the earlier you reach out, the easier it is to hold a slot.<\/p><\/details>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- REQUEST FORM -->\n<section class=\"req dark\" id=\"request\">\n  <div class=\"wrap\">\n    <div class=\"sec-head\">\n      <div>\n        <p class=\"eyebrow rv\"><span class=\"idx num\">10<\/span>Request<\/p>\n        <h2 class=\"rv\" style=\"--i:1\">Request a C3PAO assessment<\/h2>\n      <\/div>\n      <p class=\"lede rv\" style=\"--i:2\">Tell us where you stand. The right team \u2014 certification or readiness \u2014 replies within one business day with next steps and your starting-at pricing.<\/p>\n    <\/div>\n    <form class=\"form-grid rv\" id=\"reqForm\" novalidate>\n      <div class=\"hp-field\" aria-hidden=\"true\" style=\"position:absolute;left:-9999px;top:auto;width:1px;height:1px;overflow:hidden\">\n        <label for=\"f-company-url\">Company URL<\/label>\n        <input id=\"f-company-url\" name=\"company_url\" type=\"text\" tabindex=\"-1\" autocomplete=\"off\">\n        <input name=\"hp\" type=\"text\" tabindex=\"-1\" autocomplete=\"off\">\n        <input name=\"website\" type=\"text\" tabindex=\"-1\" autocomplete=\"off\">\n      <\/div>\n      <div class=\"fg\"><label for=\"f-name\">Name<\/label><input id=\"f-name\" name=\"name\" type=\"text\" autocomplete=\"name\" required><span class=\"err\">Add your name.<\/span><\/div>\n      <div class=\"fg\"><label for=\"f-company\">Company<\/label><input id=\"f-company\" name=\"company\" type=\"text\" autocomplete=\"organization\" required><span class=\"err\">Add your company.<\/span><\/div>\n      <div class=\"fg\"><label for=\"f-email\">Work email<\/label><input id=\"f-email\" name=\"email\" type=\"email\" autocomplete=\"email\" required><span class=\"err\">Add your work email so the right team can reach you.<\/span><\/div>\n      <div class=\"fg\"><label for=\"f-phone\">Phone<\/label><input id=\"f-phone\" name=\"phone\" type=\"tel\" autocomplete=\"tel\"><span class=\"err\"><\/span><\/div>\n      <div class=\"fg\"><label for=\"f-goal\">What are you trying to accomplish?<\/label><select id=\"f-goal\" name=\"goal\" required>\n        <option value=\"\">Select one<\/option>\n        <option value=\"certify\">Get certified (C3PAO assessment)<\/option>\n        <option value=\"mock\">Mock assessment first<\/option>\n        <option value=\"ready\">Get ready (RPO \/ advisory)<\/option>\n        <option value=\"managed\">Managed CUI enclave<\/option>\n        <option value=\"unsure\">Not sure yet<\/option>\n      <\/select><span class=\"err\">Tell us what you&#8217;re trying to accomplish.<\/span><\/div>\n      <div class=\"fg\"><label for=\"f-cui\">Do you handle CUI or FCI?<\/label><select id=\"f-cui\" name=\"cui\">\n        <option value=\"\">Select one<\/option>\n        <option value=\"cui\">CUI<\/option>\n        <option value=\"fci\">FCI only<\/option>\n        <option value=\"neither\">Neither<\/option>\n        <option value=\"unsure\">Not sure<\/option>\n      <\/select><span class=\"err\"><\/span><\/div>\n      <div class=\"fg\"><label for=\"f-driver\">Is a contract or solicitation driving this?<\/label><select id=\"f-driver\" name=\"driver\">\n        <option value=\"\">Select one<\/option>\n        <option value=\"dod\">Yes \u2014 DoD<\/option>\n        <option value=\"federal\">Yes \u2014 other federal<\/option>\n        <option value=\"anticipating\">Anticipating one<\/option>\n        <option value=\"no\">No<\/option>\n      <\/select><span class=\"err\"><\/span><\/div>\n      <div class=\"fg\"><label for=\"f-timeline\">When do you need to be ready?<\/label><select id=\"f-timeline\" name=\"timeline\">\n        <option value=\"\">Select one<\/option>\n        <option value=\"lt3\">Under 3 months<\/option>\n        <option value=\"3-6\">3\u20136 months<\/option>\n        <option value=\"6-12\">6\u201312 months<\/option>\n        <option value=\"12+\">12+ months<\/option>\n        <option value=\"award\">By contract award date<\/option>\n      <\/select><span class=\"err\"><\/span><\/div>\n      <div class=\"fg\"><label for=\"f-size\">Organization size<\/label><select id=\"f-size\" name=\"size\">\n        <option value=\"\">Select one<\/option>\n        <option value=\"1-50\">1\u201350 employees<\/option>\n        <option value=\"51-250\">51\u2013250<\/option>\n        <option value=\"251-1000\">251\u20131,000<\/option>\n        <option value=\"1000+\">1,000+<\/option>\n      <\/select><span class=\"err\"><\/span><\/div>\n      <div class=\"fg\"><label for=\"f-ssp\">Do you have an existing SSP?<\/label><select id=\"f-ssp\" name=\"ssp\">\n        <option value=\"\">Select one<\/option>\n        <option value=\"complete\">Yes \u2014 complete<\/option>\n        <option value=\"draft\">In draft<\/option>\n        <option value=\"none\">Not yet<\/option>\n      <\/select><span class=\"err\"><\/span><\/div>\n      <div class=\"fg\"><label for=\"f-rpo\">Are you working with an RPO?<\/label><select id=\"f-rpo\" name=\"rpo\">\n        <option value=\"\">Select one<\/option>\n        <option value=\"yes\">Yes<\/option>\n        <option value=\"no\">No<\/option>\n        <option value=\"unsure\">Not sure<\/option>\n      <\/select><span class=\"err\"><\/span><\/div>\n      <div class=\"fg\"><label for=\"f-rev\">Approximate annual revenue<\/label><select id=\"f-rev\" name=\"revenue\">\n        <option value=\"\">Select one<\/option>\n        <option value=\"lt5\">Under $5M<\/option>\n        <option value=\"5-25\">$5M\u2013$25M<\/option>\n        <option value=\"25-100\">$25M\u2013$100M<\/option>\n        <option value=\"100+\">$100M+<\/option>\n      <\/select><span class=\"err\"><\/span><\/div>\n      <div class=\"form-msg\" id=\"formMsg\" role=\"status\"><\/div>\n      <div class=\"form-foot\">\n        <button class=\"btn btn-primary\" type=\"submit\">Submit request<\/button>\n        <p class=\"alt\">Prefer email? <a href=\"mailto:c3pao@augustschell.com\">c3pao@augustschell.com<\/a> \u00b7 or call <a href=\"tel:+13018389470\" class=\"num\">(301) 838-9470<\/a><\/p>\n      <\/div>\n    <\/form>\n  <\/div>\n<\/section>\n\n<\/main>\n<!--\n<footer>\n  <div class=\"wrap\">\n    <div class=\"foot\">\n      <div>\n        <img decoding=\"async\" src=\"assets\/2023-ase-logo_w.tag-white.svg\" alt=\"August Schell \u2014 Solutions &amp; Engineering\">\n      <\/div>\n      <div class=\"addr\">\n        1700 Rockville Pike, Suite 405<br>\n        Rockville, MD 20852<br>\n        <a href=\"tel:+13018389470\" class=\"num\">(301) 838-9470<\/a><br>\n        <a href=\"mailto:c3pao@augustschell.com\">c3pao@augustschell.com<\/a>\n      <\/div>\n      <nav class=\"foot-links\" aria-label=\"Footer\">\n        <a href=\"\/cmmc\/\">CMMC hub<\/a>\n        <a href=\"\/cmmc\/rpo-advisory\/\">RPO &amp; Readiness Advisory<\/a>\n        <a href=\"https:\/\/augustschell.com\/about\/\">About August Schell<\/a>\n      <\/nav>\n    <\/div>\n    <div class=\"foot-base\">\n      <span>&copy; 2026 August Schell. All rights reserved.<\/span>\n      <span>Authorized C3PAO \u00b7 Registered RPO \u00b7 ISO 9001 certified<\/span>\n    <\/div>\n  <\/div>\n<\/footer>\n-->\n<script>\n\/* ====== reveal on scroll ====== *\/\n(function(){\n  var io=new IntersectionObserver(function(es){es.forEach(function(e){if(e.isIntersecting){e.target.classList.add('in');io.unobserve(e.target)}})},{threshold:.12,rootMargin:'0px 0px -40px 0px'});\n  document.querySelectorAll('.rv').forEach(function(el){io.observe(el)});\n  \/* fallback: if IO is deferred (background tab \/ odd engines), reveal anything already in view *\/\n  setTimeout(function(){\n    document.querySelectorAll('.rv:not(.in)').forEach(function(el){\n      if(el.getBoundingClientRect().top < window.innerHeight) el.classList.add('in');\n    });\n  },1200);\n})();\n\n\/* ====== nav toggle ====== *\/\n(function(){\n  var t=document.getElementById('navToggle'),l=document.getElementById('navLinks');\n  t.addEventListener('click',function(){var open=l.classList.toggle('open');t.setAttribute('aria-expanded',open)});\n  l.addEventListener('click',function(e){if(e.target.tagName==='A'){l.classList.remove('open');t.setAttribute('aria-expanded','false')}});\n})();\n\n\/* ====== readiness check ====== *\/\n(function(){\n  var QS=[\n    {kind:'Routing',text:'Does your organization store or process CUI?',opts:[\n      {l:'Yes',h:'Controlled Unclassified Information is in our environment',v:'cui'},\n      {l:'FCI only',h:'Federal Contract Information, but no CUI',v:'fci'},\n      {l:'Not sure',h:'We haven\u2019t formally identified it',v:'unsure'}]},\n    {kind:'Routing',text:'Is a contract or solicitation driving this?',opts:[\n      {l:'Yes \u2014 active',h:'A current contract or RFP requires it',v:'active'},\n      {l:'Anticipated',h:'We expect the requirement soon',v:'anticipated'},\n      {l:'No',h:'Getting ahead of it',v:'no'}]},\n    {kind:'Scored',dim:'Scope',text:'Have you defined your CUI scope and system boundary?',opts:[\n      {l:'Documented',h:'Scope and boundary are written down and current',v:25},\n      {l:'Partially',h:'We have a working idea, not formalized',v:12},\n      {l:'Not yet',h:'Scope is undefined',v:0}]},\n    {kind:'Scored',dim:'SSP',text:'Do you have a System Security Plan?',opts:[\n      {l:'Complete',h:'Current SSP covering the assessed environment',v:25},\n      {l:'In draft',h:'Started but incomplete',v:12},\n      {l:'None',h:'No SSP today',v:0}]},\n    {kind:'Scored',dim:'Gap analysis',text:'Have you run a gap analysis against the 110 NIST SP 800-171 controls?',opts:[\n      {l:'Completed',h:'Control-by-control status is known',v:25},\n      {l:'In progress',h:'Underway, not finished',v:12},\n      {l:'Not started',h:'No formal gap analysis',v:0}]},\n    {kind:'Scored',dim:'POA&#038;M \/ SPRS',text:'Do you have a POA&#038;M and a submitted SPRS score?',opts:[\n      {l:'Both',h:'POA&#038;M maintained and SPRS score submitted',v:25},\n      {l:'One of the two',h:'Either a POA&#038;M or an SPRS score',v:12},\n      {l:'Neither',h:'Neither exists yet',v:0}]}\n  ];\n  var idx=0,answers=[];\n  var qView=document.getElementById('qView'),resView=document.getElementById('resView'),\n      qCount=document.getElementById('qCount'),qKind=document.getElementById('qKind'),\n      qText=document.getElementById('qText'),qOpts=document.getElementById('qOpts'),\n      qBar=document.getElementById('qBar'),qBack=document.getElementById('qBack');\n\n  function draw(focusQ){\n    var q=QS[idx];\n    qCount.textContent='Question '+(idx+1)+' of '+QS.length;\n    if(focusQ){qText.setAttribute('tabindex','-1');qText.focus({preventScroll:true})}\n    qKind.textContent=q.kind==='Routing'?'Routing':'Scored \u00b7 '+q.dim;\n    qText.textContent=q.text;\n    qBar.style.width=((idx+1)\/QS.length*100)+'%';\n    qOpts.innerHTML='';\n    q.opts.forEach(function(o){\n      var b=document.createElement('button');\n      b.type='button';b.className='q-opt';\n      b.innerHTML='<span>'+o.l+'<\/span><span class=\"h\">'+o.h+'<\/span>';\n      b.addEventListener('click',function(){answers[idx]=o;idx++;idx<QS.length?draw(true):finish()});\n      qOpts.appendChild(b);\n    });\n    qBack.hidden=idx===0;\n  }\n  qBack.addEventListener('click',function(){if(idx>0){idx--;draw()}});\n\n  function finish(){\n    var cui=answers[0].v;\n    var dims=[2,3,4,5].map(function(i){return{name:QS[i].dim,pts:answers[i].v}});\n    var score=dims.reduce(function(s,d){return s+d.pts},0);\n    var band,title,rec,cta,goal;\n    if(cui==='fci'){\n      band='FCI only';title='You likely need CMMC Level 1.';\n      rec='Level 1 is self-assessed \u2014 a Level 2 C3PAO assessment is probably more than you need. A short scoping call will confirm your level before you spend anything.';\n      cta='Set up a scoping call';goal='unsure';\n    }else if(cui==='unsure'){\n      band='Scope first';title='Confirm your level before anything else.';\n      rec='Whether you hold CUI determines everything downstream. We\u2019ll set up a short scoping call to confirm your level \u2014 before you commit to an assessment you may not need.';\n      cta='Set up a scoping call';goal='unsure';\n    }else if(score>=75){\n      band='Assessment-ready';title='Book the assessment.';\n      rec='Your fundamentals \u2014 scope, SSP, gap position, and SPRS \u2014 look strong. The next move is scheduling the formal Level 2 certification assessment while assessor calendar is available.';\n      cta='Request a C3PAO assessment';goal='certify';\n    }else if(score>=40){\n      band='In progress';title='Run the mock first.';\n      rec='You\u2019re partway there. A mock assessment gives you a Met \/ Not Met report across all 110 controls \u2014 so the gaps surface in the dress rehearsal, not the assessment of record.';\n      cta='Request a mock assessment';goal='mock';\n    }else{\n      band='Early stage';title='Start with readiness, not assessment.';\n      rec='An assessment today would document gaps, not certify you. Our RPO advisory builds your scope, SSP, and remediation plan \u2014 then you certify once, with an independent path kept clean.';\n      cta='Start with RPO advisory';goal='ready';\n    }\n    qView.style.display='none';resView.classList.add('show');\n    var showScore=(cui==='cui');\n    document.getElementById('ringWrap').style.display=showScore?'':'none';\n    document.getElementById('resBand').textContent=band;\n    document.getElementById('resTitle').textContent=title;\n    document.getElementById('resRec').textContent=rec;\n    var cBtn=document.getElementById('resCta');cBtn.textContent=cta;\n    cBtn.onclick=function(){var g=document.getElementById('f-goal');if(g&&goal)g.value=goal;};\n    var dWrap=document.getElementById('dims');dWrap.innerHTML='';\n    if(showScore){\n      dims.forEach(function(d,i){\n        var lab=d.pts===25?'Complete':d.pts===12?'Partial':'Not started';\n        var el=document.createElement('div');el.className='dim';\n        el.innerHTML='<div class=\"dl\"><span>'+d.name+'<\/span><b>'+lab+'<\/b><\/div><div class=\"m\"><i><\/i><\/div>';\n        dWrap.appendChild(el);\n        setTimeout(function(){el.querySelector('i').style.width=(d.pts\/25*100)+'%'},150+i*120);\n      });\n      var fg=document.getElementById('ringFg'),C=414.7;\n      var target=Math.round(score);\n      setTimeout(function(){fg.style.strokeDashoffset=C-(C*target\/100)},120);\n      var v=document.getElementById('ringVal'),n=0;\n      var tick=setInterval(function(){n+=Math.max(1,Math.round(target\/40));if(n>=target){n=target;clearInterval(tick)}v.textContent=n},28);\n    }else{\n      dWrap.style.display='none';\n    }\n  }\n  document.getElementById('qRestart').addEventListener('click',function(){\n    idx=0;answers=[];resView.classList.remove('show');qView.style.display='';\n    document.getElementById('dims').style.display='';draw();\n  });\n  draw();\n})();\n\n\/* ====== form validation + routed success ====== *\/\n(function(){\n  var form=document.getElementById('reqForm'),msg=document.getElementById('formMsg');\n  function bad(el,on){\n    var fg=el.closest('.fg');fg.classList.toggle('bad',on);\n    var err=fg.querySelector('.err');\n    if(err&&!err.id){err.id=el.id+'-err'}\n    if(on){el.setAttribute('aria-invalid','true');if(err)el.setAttribute('aria-describedby',err.id)}\n    else{el.removeAttribute('aria-invalid');el.removeAttribute('aria-describedby')}\n  }\n  form.addEventListener('submit',function(e){\n    e.preventDefault();\n    var ok=true,firstBad=null;\n    var name=form.name,company=form.company,email=form.email,goal=form.goal;\n    [name,company,goal].forEach(function(f){var empty=!f.value.trim();bad(f,empty);if(empty){ok=false;firstBad=firstBad||f}});\n    var eVal=email.value.trim(),eOk=\/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$\/.test(eVal);\n    var eErr=email.closest('.fg').querySelector('.err');\n    if(!eVal){eErr.textContent='Add your work email so the right team can reach you.';bad(email,true);ok=false;firstBad=firstBad||email}\n    else if(!eOk){eErr.textContent='That email doesn\u2019t look right. Use your work address.';bad(email,true);ok=false;firstBad=firstBad||email}\n    else bad(email,false);\n    msg.classList.remove('show','fail');\n    if(!ok){if(firstBad)firstBad.focus();return}\n    var g=goal.value;\n    var text;\n    if(g==='certify'||g==='mock'){text='Thank you \u2014 our certification team will reach out within one business day with next steps and your starting-at pricing.'}\n    else if(g==='ready'||g==='managed'){text='Thank you \u2014 our readiness team will reach out within one business day with next steps and your starting-at pricing.'}\n    else{text='Thank you \u2014 we\u2019ll set up a short scoping call to confirm your level before anything else.'}\n    var submitBtn=form.querySelector('button[type=\"submit\"]'),btnLabel=submitBtn?submitBtn.textContent:'';\n    var payload={};new FormData(form).forEach(function(v,k){payload[k]=v;});\n    payload.source='c3pao-assessment-page';\n    if(submitBtn){submitBtn.disabled=true;submitBtn.textContent='Sending\u2026';}\n    fetch('https:\/\/hjfemzftgsddkhojoigq.supabase.co\/functions\/v1\/lead-intake',{\n      method:'POST',headers:{'Content-Type':'application\/json'},body:JSON.stringify(payload)\n    }).then(function(r){return r.json().catch(function(){return{};}).then(function(j){return{ok:r.ok&&j&&j.ok===true};});})\n      .then(function(res){\n        if(!res.ok)throw new Error('rejected');\n        msg.classList.remove('fail');msg.textContent=text;msg.classList.add('show');\n        msg.scrollIntoView({behavior:'smooth',block:'center'});\n        if(submitBtn)submitBtn.textContent='Request sent';\n      })\n      .catch(function(){\n        msg.classList.remove('show');\n        msg.textContent='Something went wrong sending your request. Please email us at c3pao@augustschell.com or call (301) 838-9470 and we\u2019ll take it from there.';\n        msg.classList.add('show','fail');\n        msg.scrollIntoView({behavior:'smooth',block:'center'});\n        if(submitBtn){submitBtn.disabled=false;submitBtn.textContent=btnLabel||'Submit request';}\n      });\n  });\n  form.addEventListener('input',function(e){if(e.target.closest('.fg'))bad(e.target,false)});\n})();\n<\/script>\n<\/body>\n<\/html>\n","protected":false},"excerpt":{"rendered":"<p>CMMC Level 2 C3PAO Assessment | August Schell Skip to content Cyber AB Authorized C3PAO \u00b7 DIBCAC Assessed Authorized CMMC Level&nbsp;2 C3PAO assessments August Schell is an authorized CMMC Third-Party Assessment Organization. Our all-W-2, in-house Lead CCAs run the formal CMMC Level&nbsp;2 certification assessment against the 110 controls of NIST SP 800-171 \u2014 so your [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":1416,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_gspb_post_css":"#gspb_row-id-gsbp-938b7e4{justify-content:space-between;margin-top:0;margin-bottom:0;display:flex;flex-wrap:wrap}#gspb_row-id-gsbp-938b7e4>.gspb_row__content{display:flex;justify-content:space-between;margin:0 auto;width:100%;flex-wrap:wrap}.gspb_row{position:relative}div[id^=gspb_col-id]{box-sizing:border-box;position:relative;padding:var(--gs-row-column-padding, 15px min(3vw, 20px))}body.gspb-bodyfront #gspb_row-id-gsbp-938b7e4>.gspb_row__content{max-width:var(--wp--style--global--wide-size, 1200px)}#gspb_col-id-gsbp-2f22e1f.gspb_row__col--12{width:100%}@media (max-width:575.98px){#gspb_col-id-gsbp-2f22e1f.gspb_row__col--12{width:100%}}","footnotes":""},"class_list":["post-1736","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/augustschell.com\/wp-json\/wp\/v2\/pages\/1736","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/augustschell.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/augustschell.com\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/augustschell.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/augustschell.com\/wp-json\/wp\/v2\/comments?post=1736"}],"version-history":[{"count":12,"href":"https:\/\/augustschell.com\/wp-json\/wp\/v2\/pages\/1736\/revisions"}],"predecessor-version":[{"id":1838,"href":"https:\/\/augustschell.com\/wp-json\/wp\/v2\/pages\/1736\/revisions\/1838"}],"up":[{"embeddable":true,"href":"https:\/\/augustschell.com\/wp-json\/wp\/v2\/pages\/1416"}],"wp:attachment":[{"href":"https:\/\/augustschell.com\/wp-json\/wp\/v2\/media?parent=1736"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}