Skip to main content

Advisory

DHG Becomes Authorized CMMC 3rd Party Assessor Organization (C3PAO)

To become an Authorized C3PAO, DHG underwent an assessment of adherence to the requirements of the CMMC framework. Once the CMMC Assessment Process (CAP) is finalized by the Department of Defense and the CMMC Accreditation Body, DHG’s team will be able to

Dixon Hughes Goodman (DHG), a U.S. top 20 public accounting and advisory firm, is pleased to announce it is now accredited as an Authorized CMMC 3rd Party Assessor Organization (C3PAO) with the CMMC Accreditation Body. DHG is the sixth organization to achieve this designation and is the first top 20 public accounting and advisory firm. Tom Tollerton, the leader of the firm’s Cybersecurity Solutions team, has also been named a CMMC Provisional Assessor by the Accreditation Body.

To become an Authorized C3PAO, DHG underwent an assessment of adherence to the requirements of the CMMC framework. Once the CMMC Assessment Process (CAP) is finalized by the Department of Defense and the CMMC Accreditation Body, DHG’s team will be able to perform CMMC certification assessments for defense contractors across the country.

DHG is already a CMMC Registered Provider Organization (RPO) with the CMMC Accreditation Body and has an experienced team that provides CMMC and NIST 800-171 consulting services to contractors preparing for CMMC certification. This new designation allows DHG to perform certification assessments to clients where it doesn’t already perform cybersecurity consulting services. The firm is advising clients to begin preparing for certification requirements that will begin to appear in contracts, following completion of the federal rule-making process that will implement CMMC as a consideration for award of a defense contract.

In November of 2021, DoD released CMMC 2.0, an overhaul to the implementation of CUI protection and certification of contractors. Designed to smooth the rollout of CMMC and address contractor concerns about resource requirements, CMMC 2.0 simplifies the framework and reduces the expected number of contractors in the Defense Industrial Base who will require independent, third-party assessment.

For more information about DHG’s CMMC 2.0 capabilities and services, visit https://www.dhg.com/industries/government-contracting/cmmc-compliance.