Company Background:
It was 1979 when Dan Villemaire’s grandfather and father started C&M Precision Tech, a family run machine shop working out of a 5,000 square foot space in Nashua, New Hampshire. Since then C&M Precision Tech has moved to Hudson, New Hampshire. Their space has grown to 90,000 square feet and employ 90 workers.
C&M Precision Tech is a world class supplier of precision engineered and manufactured metal and plastic parts and components and assemblies. The industries they serve are defense, aerospace, medical, semiconductor, optics, flow control and other industrial applications
Situation:
“We started hearing rumblings from our customers that CMMC was coming down the pipeline and we really didn’t know much about it,” said Dan Villemaire, President of C&M Precision Tech. “ At that point, we started looking into how we could get ahead of this and become CMMC compliant.”
It was around that time a representative from NH MEP reached out to Dan letting him know about a CMMC workshop they were running. Dan attended the workshop and from there he decided to work with NH MEP to become CMMC compliant.
Solution:
NH MEP, with the support of its 3rd party service provider Mainstay Technologies, would take C&M Precision Tech through the requirements of CMMC first with the Phase 1 – GAP Analysis, and then the Phase 2 Policy, Procedures, and Program Design.
Phase 1: GAP Analysis – The Mainstay Information Security Team worked with C&M Precision Tech to perform an assessment and identify compliance, noncompliance, or partial compliance with each of the 110 components required of CMMC. This was all part of the GAP Analysis. Mainstay provided C&M Precision Tech a compliance report, along with in-person and over the phone consultations about the findings. This consultation included the creation of a Plan of Action and Milestones (POAM).
Phase 2: Policy, Procedures, and Program Design – The Mainstay Information Security Team created the appropriate Corporate Information Security Policies, Procedures, Strategies and Plans for C&M Precision Tech that aligned with CMMC. Mainstay also made cost-effective, CMMC compliant technical mitigation recommendations
Results:
“We are getting a lot more pressure from the prime contractors working for the government that are starting to push these requirements down to their suppliers. We’re now able to address their questions and concerns honestly and thoroughly because of the process we went through with NH MEP,” said Villemaire. “It’s opened up new opportunities for us, and I think in the next couple years we are going to see an even bigger opportunity because of the investment we made in CMMC.”
The following results for C&M Precision Tech can be credited to having gone through the Phase 1 and Phase 2 CMMC cybersecurity requirements:
- $150,000 in new sales over the last 12 months
- Retained sales of $100,000 over the last 12 months that otherwise would have been lost
- Increased investment of $150,000 in new products or processes over the last 12 months
- Increased investment of $50,000 in plant or equipment over the last 12 months
- Increased investment of $50,000 in information systems and software over the last 12 months
- Increased investment of $20,000 in workforce practices or employee skills over the last 12 months
“C&M Precision Tech developed a great partnership with NH MEP. With their help with the process, and the help of Mainstay Technologies performing the work, the positive impact they made to our company is so important because it brings our cybersecurity plan up to compliance.”