CMMC Consulting Services and Assessment Partner

Edwards Performance Solutions is the premier cybersecurity consulting company for Government contractors and the ideal partner to guide your organization through the intricacies of CMMC!

CMMC Consulting – Certification Made Easy

At Edwards Performance Solutions, we understand the importance of achieving Cybersecurity Maturity Model Certification (CMMC) compliance for Defense Industrial Base (DIB) companies. As a Registered Provider Organization (RPO) and authorized CMMC Certified Third-Party Assessment Organization (C3PAO), we are uniquely positioned to provide advisory CMMC consulting services and support, gap assessments to establish a CMMC plan of action, or formal CMMC Level 2 assessments.*

By choosing Edwards Performance Solutions as your CMMC partner, you can rest assured that you are receiving high-quality services from experts who understand your industry and are focused on your organizational goals. Our team of cybersecurity experts bring extensive experience in assessing and interpreting standards, guidelines, and best practices to improve cybersecurity programs. We are dedicated to helping you achieve CMMC compliance and improve your overall cybersecurity posture.

*Edwards cannot provide both RPO and C3PAO services (consulting/preparation and formal assessment) for the same organization.



CMMC draws from NIST standards, the DoD, and the international security community; CMMC 2.0 focuses entirely on NIST 800-171 security safeguards

One size does not fit all – different levels of security are necessary, depending on the contract and sensitivity of the data involved

CMMC 2.0 won’t appear in contracts until rulemaking is decided (estimated 9-24 months; August 2022-November 2023)

CMMC includes the entire DoD industrial base – approximately 300,000 contractors and subcontractors

The Cyber AB LPPs and LTPs are authorized to develop and train OSCs in various CMMC certification and informational courses

Schedule Your Free CMMC Consultation Today

CMMC Consulting Services

Impact on DoD Contractors

CMMC is a game-changer for DoD contractors. It will be included in select DoD Requests for Information (RFIs) and Requests for Proposals (RFPs) and will affect every DoD contractor and subcontractor. Failure to achieve CMMC can result in not being awarded DoD contracts.

Selecting a C3PAO

When selecting a C3PAO, it’s important to consider the organization’s credibility, technical expertise, and track record. C3PAOs must demonstrate their ability to protect your sensitive information while providing accurate and reliable assessments. Always look for a C3PAO that has the experience and credentials to support your cybersecurity needs.

About CMMC

The Cybersecurity Maturity Model Certification (CMMC) is a unified cybersecurity standard for future Department of Defense (DoD) acquisitions. It is designed to provide increased assurance that a DIB contractor can adequately protect controlled unclassified information (CUI) at a level commensurate with the risk.

The Edwards Team

Edwards Performance Solutions is the only organization that can fully support the entire CMMC Ecosystem. As an RPO and a C3PAO, we have the capability and expertise to assist with every step of the CMMC journey, from initial consulting and gap assessments to formal Level 2 assessments.

Edwards and the CMMC Ecosystem

The only organization certified by the Cyber AB to support the entire CMMC ecosystem


Edwards is an Authorized CMMC Third-Party Assessment Organization (C3PAO) with Provisional Assessors on staff, ready to support your formal CMMC assessment. Contact today!


Edwards is an RPO, but more importantly, our consultants are also CMMC Provisional Assessors. In fact, many of our consultants teach our CCP classes and developed our curriculum. Learn more.


As an LPP, Edwards developed the curriculum to train the assessment community using cybersecurity SMEs and ISDs. Our courses prepare individuals to do the job an OSC expects when they hire a CMMC Professional.


As an LTP, Edwards uses our own renowned curriculum to train members of the OSC team, consultants, supporting organizations (e.g., MSPs), and of course the assessors themselves. View our courses.

Edwards Performance Solutions, as a fully certified Third-Party Assessment Organization (C3PAO), is the ideal partner to guide your organization through the intricacies of CMMC. Our team of cybersecurity experts is adept at undertaking detailed vulnerability assessments, orchestrating readiness and gap assessments, and offer comprehensive training modules. By partnering with us, you ensure your team is well-prepared and confidently equipped for both readiness and certification stages. This not only enhances your cybersecurity posture but also enables your organization to meet compliance standards seamlessly.


Our Cybersecurity Team brings more than ten decades of combined cybersecurity experience in assessing and interpreting NIST, CIS, HIPAA and ISO 27001 standards and guidelines. Our expert management and implementation of security programs throughout the government, commercial, and healthcare industries is well respected and far reaching. Meet our team by hovering over their name!

Kat Adams

Kat Adams

Kat is a Senior Cybersecurity Consultant and Instructor at Edwards Performance Solutions, with 35+ years of practical IT experience in Information Systems, Acquisition, and Inspections. Prior to Edwards, Kat was the Director of Compliance Solutions and Services at Cask Government Services.

Sam Bell

Sam Bell

Sam Bell leverages 36+ years of IT and project management experience in managing data warehouse, call center, reporting, and security infrastructure and assessments projects. His focus on process improvement ensures a consistent, repeatable, and measurable approach is taken to deliver value and a secure operating environment for clients. At Edwards, Sam oversees the Cybersecurity Assessments practice, leading NIST 800-53, HIPAA, NIST CSF, and CMMC readiness assessments for firms of all sizes, across diverse industries.

Rebecca Duve

Rebecca Duve

Rebecca Duve brings 20+ years of experience in government and military program management, health information technology, strategic planning, and civilian clinical laboratory science to her role within Edwards Performance Solutions. Rebecca provides all aspects of project support from administrative, scheduling, strategic planning, process improvement and mentoring of new team members. Bringing her program and project management experience to the commercial and cybersecurity team, Rebecca assists by providing structure and coordination of the team members for both internal and external audits using a combination of agile and waterfall techniques.

Tyler Gormus

Tyler Gormus

Tyler Gormus joined the Edwards Cybersecurity Team in 2018. He provides experience in conducting security risk assessments for clients in using multiple standards and frameworks (i.e., NIST 800-53, 800-171, CSF, and ISO 27001), interviewing appropriate stakeholders, and implementing an easy to use/cost-effective approach for customers working toward compliance. Tyler also holds a Bachelor’s degree in Secure Computing and Information Assurance.

Matt Hoeper

Matt Hoeper

Matt Hoeper is an experienced cybersecurity professional with 25+ years of IT experience. Matt holds a Master’s degree in Management Information Systems as well as PMP and CISSP certifications. Prior to joining Edwards, he worked for Fortune 500 companies and small businesses in areas of engineering, financial, marketing, supply chain, manufacturing, and health care. Over his career, Matt has conducted security assessments against multiple standards.

Meg Schlichter

Meg Schlichter

Meg Schlichter is the CMMC Training Specialst for Edwards Performance Solutions. She studied English Literature at Austin Peay State University where she developed a passion for facilitating lifelong learning and adult education. Meg has extensive customer service experience and loves helping people reach their next personal or career milestone through professional development and training.

Joe Stoner

Joe Stoner

Joe Stoner is an IT and cybersecurity professional at Edwards with 6+ years of experience, focusing on computer administration and network/system security. Since joining Edwards in 2014, Joe has conducted security risk assessments for clients, using multiple standards and frameworks (i.e., NIST 800-53, 800-171, CSF, and ISO 27001), provided cybersecurity services to mature client security postures, and developed/implemented procedures to meet security goals.