The Challenge
CMMC Was No Longer Optional
When OASIS+ required a validated plan to protect Controlled Unclassified Information (CUI), OTHSolutions knew they needed a compliant communication and collaboration system along with a documented, repeatable cybersecurity program.
With the advice of their MSP partner, MainSpring, OTHSolutions decided to get their CMMC certification to expand their go-to-market strategy to include Defense Industrial Base (DIB) contractors.
Starting from ground zero, OTHSolutions wanted to avoid over-engineering the solution or overspending.
The Solution: PreVeil Enclave
OTHSolutions looked to MainSpring as their MSP and advisor to build a practical, cost-effective path to certification. MainSpring delivered everything they needed including:
- The initial gap assessment
- Creating a security roadmap
- Recommending and implementing a compliant tech stack
- Preparing documentation for the C3PAO assessment
“MainSpring took time to understand what we truly needed. They built a perfect-fit plan—nothing more, nothing less.“
Bill Hyjek
President & Founder, OTHSolutions
Selecting PreVeil
MainSpring recommended PreVeil as the best-fit solution for storing and protecting CUI.
OTHSolutions chose PreVeil because it was:
- Extremely easy to use
- More flexible and affordable than GCC High
- A secure enclave that met CUI requirements
- Lightweight to deploy and manage
“Companies need a solution that fits them well today while being able to grow with them to meet their requirements 10 years from now. We want to make sure we’re making the right decision and investing in the right solution for each client, and PreVeil happened to be that.“
Ray Steen
Co-Owner & CEO, MainSpring
Today, OTHSolutions uses PreVeil for both secure email and file sharing, supported by a Microsoft Defender-based security stack.
Results: CMMC certified with a Perfect 110 Score
Final Score:
110/110
Final Assessment Score
Cost Savings:
Up to 70%
Estimated cost savings vs. alternatives.
Duration:
<9 Months
From initial kickoff call to CMMC L2 Certified
Operational
Competitive
Increased Competitiveness in federal contracting
OTHSolutions officially passed its C3PAO assessment in November 2025. OTHSolutions worked with StrategicIT Solutions as their C3PAO based on their experience with PreVeil and their practical approach. The whole process took less than 9 months from the kickoff call CMMC was first brought up on to being L2 Certified.
Business Impact
- Eligible for OASIS+ and CMMC-related opportunities
- Increased competitiveness in federal contracting
- Repeatable, predictable compliance process
- Improved security posture
- Confidence that future audits will be manageable
“It was easy for us because MainSpring did all the heavy lifting. I was trying to run a business, and Mainspring took the bull by the horns so I didn’t have to do much at all. They did everything for us and helped us get there.“
Bill Hyjek
President & Founder, OTHSolutions
Why This Matters for SMB Gov Contractors
OTHSolutions’ journey shows that:
- CMMC compliance doesn’t have to be expensive or overwhelming
- The right partner and tech stack make certification achievable
- PreVeil’s enclave approach minimizes change and simplifies audits
- A well-coordinated team (MSP + PreVeil + C3PAO) determines success
OTHSolutions is now positioned for expansion—and willing to serve as a reference for other SMBs beginning their CMMC journey.
Ready to Continue Your CMMC Journey with PreVeil?
PreVeil provides a clear path to CMMC compliance solution for defense contractors, proven in over 75 CMMC assessments at a fraction of the cost of alternatives.
