CMMC and RMM
I'm still trying to figure this all out so sorry if this is a stupid question.
If I was looking to take on clients who need to align to CMMC level 1, I will need to be CMMC level 1-certified as well. But does my RMM need to be certified as well?
It doesn't look as if any RMMs are CMMC certified but N-Able and Ninja both have writeups on it. Does that mean it's entirely out of their hands or should we be looking for someone who meets this certification?
Posted Nov 7, 2023, 4:39 PM UTC · locked
21
You need to talk to a compliance consultant or company. The rules are not set in stone yet, and they still provide guidance.
I'm not an expert, and I could be wrong, but from my limited knowledge, if they have access to the system(s), then they need to follow the same rules.
I am locking this because we are not a compliance sub; that's why companies have compliance positions. It's a whole thing in itself.