The Challenge: Regulatory Pressure + Limited IT Resources
When The Building People began preparing for CMMC, they faced a familiar challenge: how to achieve compliance without migrating their Microsoft 365 environment to GCC High.
- New Regulations made CMMC a priority as winning future contracts depends on CMMC
- Limited Internal IT Resources meant that costly alternatives, like a wholly managed VDI solution, were out of the question
- Existing Commercial Microsoft Tenant was not compliant—The Building People had deployed PreVeil but documentation and policies were not yet in place
The Solution: PreVeil Enclave
The Building People were able to narrow their scope to just PreVeil and the endpoints that PreVeil was installed on, reducing the cost and complexity of the assessment.
The assessment was further simplified because they leveraged PreVeil’s partner network. Both the MSSP that handled certain controls and the C3PAO that conducted the assessment were in PreVeil’s partner network and familiar with how PreVeil meets security requirements.
The company completed its assessment smoothly, with minimal findings. Their focus on scoping and documentation paid off — controls were satisfied through a mix of inherited PreVeil controls and strong internal policies.
“Our assessor did their homework on PreVeil and reviewed our documentation thoroughly. That preparation made for a smooth assessment experience.”
Thomas Quick
IT Manager, The Building People
Technology Stack:
- PreVeil: Secure file sharing and communication for CUI
- MSSP: Vulnerability scanning with Qualys, SIEM & log analysis
- SentinelOne: Endpoint Detection and Response (EDR)
- Microsoft Intune: Endpoint management
Strategic Partners:
- MSSP: Redspin, a PreVeil partner, provided services and monitoring for endpoint controls, simplifying the compliance journey and assessment
- C3PAO Assessment: Sentar, a PreVeil partner, provided professional C3PAO assessment services with clear communication of requirements.
Results: Perfect Score and Competitive Advantage
Final Score:
110/110
CMMC Level 2 Certification Score
PreVeil’s enclave approach—combined with support from trusted PreVeil Preferred Partners—enabled The Building People to navigate their CMMC Level 2 assessment with confidence and efficiency. With a perfect 110/110 score, the company is now exceptionally well-positioned to pursue further DoD opportunities, especially as CMMC requirements begin to appear in new contracts.
Get Started with CMMC Compliance
The Building People’s CUI enclave and successful 110/110 certification demonstrates that CMMC compliance is achievable with the right approach and technology partners.
PreVeil provides a clear path to CMMC compliance solution for defense contractors, proven in over 50 CMMC assessments at a fraction of the cost of alternatives.
