Resource hub
Guides, a checklist and a CMMC level finder
Start with the tool or the checklist if you want an answer today. Read a guide if you want the reasoning. Every claim names its source.
Use today
Three things you can use today
Tool
CMMC level finder
Three questions about the information you handle, and the CMMC level it points to.
Find your levelChecklist
Provider questions checklist
Five questions to ask every provider, with room to write two answers side by side.
Open the checklistWorksheet
CMMC scoping worksheet
An Excel file for writing down your Level 2 scope once, so every provider quotes on the same picture.
Get the worksheet
Guides
The longer explainers
Guide
How to Choose a Cybersecurity Provider for Your Small Business
Choose a cybersecurity provider by matching their services to your actual risk and compliance needs, checking that they have worked with businesses your size, asking how they handle incidents, and getting references.
Read the guideCMMC
What is CMMC and Why Your Business Needs It
Understanding CMMC certification requirements for defense contractors.
Read the guideGrants
In-Kind Cybersecurity Grants for Small Businesses
Learn how to access in-kind grants to improve your cybersecurity posture.
Read the guideThreats
Top 5 Cybersecurity Threats in 2026
The latest threats every small business owner should be aware of.
Read the guideCMMC
CMMC Gap Assessment: What to Expect
A step by step walkthrough of the CMMC Gap Assessment process.
Read the guideCMMC
Choosing Between CMMC Level 1, 2, and 3
Not all defense contractors need the same level of CMMC certification.
Read the guideGrants
Where Can Nonprofits Get Help Paying for Cybersecurity?
Nonprofits can lower cybersecurity costs through CISA's no-cost services, cyber volunteer clinics listed by CISA, Microsoft's Security Program for Nonprofits, NIST's finder for small business support programs, and Cyber Grants Alliance in-kind grants.
Read the guideCMMC
How to Choose a CMMC Consultant in Northern Virginia
How to vet a CMMC consultant in Northern Virginia: check The Cyber AB Marketplace, know the difference between a consultant and an assessor, ask about the current DoD status, and use the no cost Virginia APEX Accelerator office in Fairfax..
Read the guideGuide
Where to Find Cybersecurity Providers by City: Directories and No Cost Help
The places a small business can look up cybersecurity providers and help by location: this directory's city pages, The Cyber AB Marketplace for CMMC, NIST's support programs finder, CISA's regional advisors and your local SBDC..
Read the guideGuide
How to Choose a Managed Security Provider for a Small Business
How a small business should pick a managed service or managed security provider: what an MSP is, the contract terms CISA, NSA, FBI and allied agencies tell customers to require, and the questions to ask before you sign..
Read the guide
From the blog
Latest posts
Getting started
Your chatbot just asked you to paste something into Windows. Stop.
A reported ChatGPT chat sent a user to a fake verification page that said to paste a command into Windows Terminal. What to do, who to call, and the rule to teach your team.
CMMC
CMMC Phase II is suspended. What should a small defense contractor do now?
DoD suspended CMMC Phase II on July 13, 2026. Here is what still applies to a small defense contractor and what to do this quarter.
CMMC
FCI or CUI? The one question that sets your CMMC level
Your CMMC level follows the type of government information you handle. Here is the difference between FCI and CUI, in the words of the rules that define them.
Last reviewed:
Ready to act on what you read?
Apply for an in-kind grant if budget is the blocker, or book a CMMC gap assessment if you are ready to know where you stand.
Or email info@cybersecuritynearme.ai