Acme Defense Systems
ENG-2026-031 · CAGE 7XK21CMMC L2 · readiness review (pre-certification) · Huntsville, AL · Oct 6 – Oct 17, 2026
RKOPLMRachel Kim · Lead, Owen Price · Assessor, Lena Morales · QA
Planning
Fieldwork
Reporting
Objectives assessed
148 of 320
MET
131
NOT MET
9
N/A
8
Open requests
4
Next
Daily debrief 16:00 · Out-brief Oct 17
Readiness check · implementation statements
214 of 320 objectives have an approved statement39 pending OSC approval · 67 missing
Statements missing for 3.1.12 (5-point) — scheduled for interview and test this week; raise at today's debrief.
- 3.1.12[a–d] statements missing (IMP-0112 not started)
- 3.1.20[a–f] draft, not shared
Approved Written, awaiting approval Not written
Today · Mon Oct 12
2 of 5 done
- 09:00InterviewSystem administrators: privileged access and MFA3.5.33.1.5Tom Okafor, Dana Whitfield · Teams · Conf room B
- 10:30TestConsole logon on sampled enclave servers3.5.3[b]Tom Okafor (screen share) · HQ data room
- 13:00NextExamineSSP boundary walkthrough3.12.4[b]3.12.4[c]Marcus Lee · Teams
- 14:30TestBackup restore and encryption at rest3.8.9[a]Tom Okafor, Atlas support · Teams
- 16:00MeetingDaily debrief with OSC point of contactMarcus Lee, Dana Whitfield · Conf room B
Evidence requests
RequestObjectiveAskRequested → Accepted
Sampling plan
Approved by QA · Oct 5
PopulationSampleMethod
Recent determinations
- 3.5.3[b]MFA is implemented for local access to privileged accounts.TestNOT METRachel Kim · Lead11:42
- 3.3.1[f]Audit records are retained as defined.ExamineMETOwen Price · Assessor10:05
- 3.1.1[d]System access is limited to authorized users.TestMETRachel Kim · LeadYesterday
- 3.12.4[a]A system security plan is developed.ExamineMETOwen Price · AssessorYesterday
- 3.10.6[a]Safeguarding measures for CUI at alternate work sites are defined.InterviewN/ARachel Kim · LeadYesterday
- 3.1.12[d]Remote access sessions are monitored.InterviewNOT METOwen Price · AssessorOct 9